CVE-2023-6340

MEDIUM 5.5CVE-2023-6340 · Published 18/01/2024 · updated 17/06/2026

In short

CVE-2023-6340 is a MEDIUM (CVSS 5.5) vulnerability affecting capture client (sonicwall), netextender (sonicwall).
Chance of exploitation in the next 30 days (EPSS): 0.21%, higher than 11.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
capture client sonicwall	`≤ 3.7.10`	No fix yet
netextender sonicwall	`≤ 10.2.337`	No fix yet

Description

SonicWall Capture Client version 3.7.10, NetExtender client version 10.2.337 and earlier versions are installed with sfpmonitor.sys driver. The driver has been found to be vulnerable to Denial-of-Service (DoS) caused by Stack-based Buffer Overflow vulnerability.

References

psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0019 · Vendor Advisory

More vulnerabilities in capture client

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free