CVE-2024-29014 - Vulnerability in SonicWall SMA100 NetExtender Windows (32 and 64-bit) client 10.2.339 and earlier versions allows an attacker to arbitrary code execution when processing an EPC Client update

Back Back to CVE browser

HIGH

Vulnerability in SonicWall SMA100 NetExtender Windows (32 and 64-bit) client 10.2.339 and earlier versions allows an attacker to arbitrary code execution when processing an EPC Client update

Published Jul 18, 2024

8.8

HIGH

CVSS 3.1

EPSS 1.86%

Description

Vulnerability in SonicWall SMA100 NetExtender Windows (32 and 64-bit) client 10.2.339 and earlier versions allows an attacker to arbitrary code execution when processing an EPC Client update.

Affected products

Vendor SonicWall Product NetExtender Default
n/a
- Version
  10.2.339 and earlier versions
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

SonicWall

NetExtender

n/a

Version	Status	Constraints
10.2.339 and earlier versions	affected	-

Vendor SonicWall Product Netextender Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=10.2.339

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

SonicWall

Netextender

n/a

Version	Status	Constraints
0	affected	<=10.2.339

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-94

Code Injection

References (1)

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0011
vendor-advisoryVendor Advisory

Link	Providers	Tags
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0011		vendor-advisoryVendor Advisory

Change history (3)

Sep 23, 2026, 11:05 PM UTC CISA ADP
- SSVC exploitation changed from poc to none
Sep 22, 2026, 07:31 AM UTC CISA ADP
- SSVC exploitation changed from none to poc
Sep 22, 2026, 07:19 AM UTC CISA ADP
- SSVC exploitation changed from poc to none