CVE-2024-45315 - CVE House

Back to Database

Status published Unknown CVE-2024-45315

The Improper link resolution before file access ('Link Following') vulnerability...

0 CVSS

Vulnerability Description

The Improper link resolution before file access ('Link Following') vulnerability in SonicWall Connect Tunnel (version 12.4.3.271 and earlier of Windows client) allows users with standard privileges to create arbitrary folders and files, potentially leading to local Denial of Service (DoS) attack.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-45315

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

Hashim Jawad (@ihack4falafel) through Trend Micro (Zero Day Initiative)

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0017

More from SonicWall

View All →

A Path Traversal vulnerability has been identified in the Email...

Download of Code Without Integrity Check Vulnerability in the SonicWall...

A potential exposure of sensitive information in log files in...

A local privilege escalation vulnerability due to insufficient authorization in...

A Stack-based buffer overflow vulnerability in the SonicOS SSLVPN service...

Affected Vendor

SonicWall

View all reports →

Affected Software

Connect Tunnel

Vulnerable Versions:

12.4.3.271 and earlier versions

Timeline

Official Publish: October 11th, 2024

Last Modified: November 1st, 2024

Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1574 Hijack Execution Flow

Privilege Escalation

T1222 File and Directory Permissions Modification

Defense Evasion

T1005 Data from Local System

T1565 Data Manipulation

T1078 Valid Accounts