{"id":"CVE-2024-29014","title":"Vulnerability in SonicWall SMA100 NetExtender Windows (32 and 64-bit) client 10.2.339 and earlier versions allows an attacker to arbitrary code execution when processing an EPC Client update.","summary":"Vulnerability in SonicWall SMA100 NetExtender Windows (32 and 64-bit) client 10.2.339 and earlier versions allows an attacker to arbitrary code execution when processing an EPC Client update.","severity":"high","cvss":8.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-94"],"vendor":"sonicwall","product":"netextender","affected":["netextender < 10.2.341"],"patched":["netextender 10.2.341"],"published":"2024-07-18","updated":"2026-11-03","sourceUpdated":"2026-11-03T22:17:17.283","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-29014","references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0011","label":"PSIRT@sonicwall.com"},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0011","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd","cve.org","exploit-available"],"exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"no","technicalImpact":"total","timestamp":"2024-11-27T04:55:17.683933Z"},"scores":{"nvd":8.8,"adp":7.1},"epss":0.01864,"epssPercentile":0.79343,"ingestedAt":"2026-11-05T06:38:03.576Z","slug":"CVE-2024-29014","body":"## Overview\n\nVulnerability in SonicWall SMA100 NetExtender Windows (32 and 64-bit) client 10.2.339 and earlier versions allows an attacker to arbitrary code execution when processing an EPC Client update.\n\n## Affected\n\n- `netextender < 10.2.341`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `netextender 10.2.341`","depth":"midnight","depthScore":61,"depthScoreParts":{"impact":48.4,"likelihood":0.4,"exploitation":12,"ransomware":0},"changes":[]}