CVE-2024-45315

Summary

CVE-2024-45315 is a vulnerability affecting SonicWall Connect Tunnel (version 12.4.3.271 and earlier of Windows client). This issue involves improper link resolution before file access, also known as 'Link Following.' Users with standard privileges can exploit this vulnerability to create arbitrary folders and files, potentially causing local Denial of Service (DoS) attacks. This weakness could allow attackers to disrupt the normal functioning of the SonicWall Connect Tunnel software. Users are urged to update their software to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.