PT-2024-31567
CVE-2024-45315
·
Published
2024-10-10
·
Updated
2024-11-01
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
SonicWall Connect Tunnel versions 12.4.3.271 and earlier
Description
The issue allows users with standard privileges to create arbitrary folders and files, potentially leading to a local Denial of Service (DoS) attack due to improper link resolution before file access.
Recommendations
For SonicWall Connect Tunnel versions 12.4.3.271 and earlier, update to a version later than 12.4.3.271 to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾