CVE-2023-6340

5.5 mediumEPSS 0.2%

Medium (5.5) in sonicwall. EPSS 0.2% chance of exploitation in the next 30 days.

SonicWall Capture Client version 3.7.10, NetExtender client version 10.2.337 and earlier versions are installed with sfpmonitor.sys driver. The driver has been found to be vulnerable to Denial-of-Service (DoS) caused by Stack-based Buffer Overflow vulnerability.

Severity

CVSS 3.1

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 11% of CVEs (scores of 2026-10-31)
CWEs: CWE-787, CWE-121
Published: 2024-01-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

sonicwall:capture_client
sonicwall:netextender

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0019
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0019

Check your stack JSON