CVE-2024-29014

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Vulnerability in SonicWall SMA100 NetExtender Windows (32 and 64-bit) client 10.2.339 and earlier versions allows an attacker to arbitrary code execution when processing an EPC Client update.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-94

Affected software

No affected versions have been published.

Timeline

Published
Jul 18, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-290157.8Uncontrolled search path in some Intel(R) VTune(TM) Profiler software before versions 2024.1 may allow an authenticated user to potentially CVE-2024-290187.5Moby is an open source container framework that is a key component of Docker Engine, Docker Desktop, and other distributions of container toCVE-2024-290198.1ESPHome is a system to control microcontrollers remotely through Home Automation systems. API endpoints in dashboard component of ESPHome veCVE-2024-29028.8A vulnerability was found in Tenda AC7 15.03.06.44 and classified as critical. This issue affects the function fromSetWifiGusetBasic of the CVE-2024-290205.3JumpServer is an open source bastion host and an operation and maintenance security audit system. An authorized attacker can obtain sensitivCVE-2024-290219.0Judge0 is an open-source online code execution system. The default configuration of Judge0 leaves the service vulnerable to a sandbox escapeCVE-2024-290228.8Xibo is an Open Source Digital Signage platform with a web content management system and Windows display player software. In affected versioCVE-2024-290237.2Xibo is an Open Source Digital Signage platform with a web content management system and Windows display player software. Session tokens areCVE-2024-290245.3JumpServer is an open source bastion host and an operation and maintenance security audit system. An authenticated user can exploit the InseCVE-2024-290255.3Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers CVE-2024-290269.1Owncast is an open source, self-hosted, decentralized, single user live video streaming and chat server. In versions 0.1.2 and prior, a leniCVE-2024-290279.0Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 6.5.5 and 7.0.0-al