Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
CVE-2023-41715 Details
Description
SonicOS post-authentication Improper Privilege Management vulnerability in the SonicOS SSL VPN Tunnel allows users to elevate their privileges inside the tunnel.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Nov 15, 2023Exploitation: NoneAutomatable: NoTechnical Impact: Total
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0012 | CVE | Vendor Advisory |
| https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0012 | [email protected] | Vendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-269 | Improper Privilege Management | [email protected] |
| CWE-269 | Improper Privilege Management | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| sonicwall sonicos | < 7.0.1-5145 < 6.5.4.4-44v-21-2340 < 6.5.4.13-105n |
CPE
Remediation
| |
| sonicwall nsa2700 | All versions |
CPE
Remediation
| |
| sonicwall nsa3700 | All versions |
CPE
Remediation
| |
| sonicwall nsa4700 | All versions |
CPE
Remediation
| |
| sonicwall nsa5700 | All versions |
CPE
Remediation
| |
| sonicwall nsa6700 | All versions |
CPE
Remediation
| |
| sonicwall nssp10700 | All versions |
CPE
Remediation
| |
| sonicwall nssp11700 | All versions |
CPE
Remediation
| |
| sonicwall nssp13700 | All versions |
CPE
Remediation
| |
| sonicwall nssp15700 | All versions |
CPE
Remediation
| |
| sonicwall nsv10 | All versions |
CPE
Remediation
| |
| sonicwall nsv100 | All versions |
CPE
Remediation
| |
| sonicwall nsv1600 | All versions |
CPE
Remediation
| |
| sonicwall nsv200 | All versions |
CPE
Remediation
| |
| sonicwall nsv25 | All versions |
CPE
Remediation
| |
| sonicwall nsv270 | All versions |
CPE
Remediation
| |
| sonicwall nsv300 | All versions |
CPE
Remediation
| |
| sonicwall nsv400 | All versions |
CPE
Remediation
| |
| sonicwall nsv470 | All versions |
CPE
Remediation
| |
| sonicwall nsv50 | All versions |
CPE
Remediation
| |
| sonicwall nsv800 | All versions |
CPE
Remediation
| |
| sonicwall nsv870 | All versions |
CPE
Remediation
| |
| sonicwall tz270 | All versions |
CPE
Remediation
| |
| sonicwall tz270w | All versions |
CPE
Remediation
| |
| sonicwall tz370 | All versions |
CPE
Remediation
| |
| sonicwall tz370w | All versions |
CPE
Remediation
| |
| sonicwall tz470 | All versions |
CPE
Remediation
| |
| sonicwall tz470w | All versions |
CPE
Remediation
| |
| sonicwall tz570 | All versions |
CPE
Remediation
| |
| sonicwall tz570p | All versions |
CPE
Remediation
| |
| sonicwall tz570w | All versions |
CPE
Remediation
| |
| sonicwall tz670 | All versions |
CPE
Remediation
| |
| sonicwall nsa 2600 | All versions |
CPE
Remediation
| |
| sonicwall nsa 2650 | All versions |
CPE
Remediation
| |
| sonicwall nsa 3600 | All versions |
CPE
Remediation
| |
| sonicwall nsa 3650 | All versions |
CPE
Remediation
| |
| sonicwall nsa 4600 | All versions |
CPE
Remediation
| |
| sonicwall nsa 4650 | All versions |
CPE
Remediation
| |
| sonicwall nsa 5600 | All versions |
CPE
Remediation
| |
| sonicwall nsa 5650 | All versions |
CPE
Remediation
| |
| sonicwall nsa 6600 | All versions |
CPE
Remediation
| |
| sonicwall nsa 6650 | All versions |
CPE
Remediation
| |
| sonicwall sm 9200 | All versions |
CPE
Remediation
| |
| sonicwall sm 9250 | All versions |
CPE
Remediation
| |
| sonicwall sm 9400 | All versions |
CPE
Remediation
| |
| sonicwall sm 9450 | All versions |
CPE
Remediation
| |
| sonicwall sm 9600 | All versions |
CPE
Remediation
| |
| sonicwall sm 9650 | All versions |
CPE
Remediation
| |
| sonicwall soho 250 | All versions |
CPE
Remediation
| |
| sonicwall soho 250w | All versions |
CPE
Remediation
| |
| sonicwall sohow | All versions |
CPE
Remediation
| |
| sonicwall tz 300 | All versions |
CPE
Remediation
| |
| sonicwall tz 300p | All versions |
CPE
Remediation
| |
| sonicwall tz 300w | All versions |
CPE
Remediation
| |
| sonicwall tz 350 | All versions |
CPE
Remediation
| |
| sonicwall tz 400 | All versions |
CPE
Remediation
| |
| sonicwall tz 400w | All versions |
CPE
Remediation
| |
| sonicwall tz 500 | All versions |
CPE
Remediation
| |
| sonicwall tz 500w | All versions |
CPE
Remediation
| |
| sonicwall tz 600 | All versions |
CPE
Remediation
| |
| sonicwall tz 600p | All versions |
CPE
Remediation
| |
Change History
6 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| May 2, 2025 | CVE Modified | CISA-ADP |
| Nov 21, 2024 | CVE Modified | CVE |
| May 14, 2024 | CVE Modified | [email protected] |
| Oct 19, 2023 | Initial Analysis | [email protected] |