CVE-2023-41715

Summary

CVE-2023-41715 is a post-authentication privilege escalation vulnerability affecting SonicOS SSL VPN Tunnels. This issue allows users, once they have successfully logged in, to elevate their privileges within the tunnel, potentially gaining unauthorized access to sensitive information or functionality. This vulnerability may pose a significant risk to organizations using SonicOS for SSL VPN connectivity, and it is recommended that affected organizations apply the necessary patches as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.