medium5.5
CVE-2023-6340
SonicWall Capture Client version 3.7.10, NetExtender client version 10.2.337 and earlier versions are installed with sfpmonitor.sys driver.
Impact
SonicWall Capture Client version 3.7.10, NetExtender client version 10.2.337 and earlier versions are installed with sfpmonitor.sys driver. The driver has been found to be vulnerable to Denial-of-Service (DoS) caused by Stack-based Buffer Overflow vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sonicwall | Capture Client | through 3.7.10 |
| Sonicwall | Netextender | through 10.2.337 |