CVE-2023-6340: SonicWall Capture Client version 3.7.10, NetExtender client version 10.2.337 and earlier versions are installed with sfpmonitor.sys driver. The driver has been…

PriorityP424medium5.5CVSS 3.1

AVLACLPRLUINSUCNINAH

EPSS

0.21%

11.6th percentile

SonicWall Capture Client version 3.7.10, NetExtender client version 10.2.337 and earlier versions are installed with sfpmonitor.sys driver. The driver has been found to be vulnerable to Denial-of-Service (DoS) caused by Stack-based Buffer Overflow vulnerability.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
sonicwall	capture_client	<= 3.7.10	—
sonicwall	capture_client	—	—
sonicwall	capture_client	—	—
sonicwall	netextender	<= 10.2.337	—
sonicwall	netextender	—	—
sonicwall	netextender	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.