---
id: CVE-2024-29014
title: >-
  Vulnerability in SonicWall SMA100 NetExtender Windows (32 and 64-bit) client
  10.2.339 and earlier versions allows an attacker to arbitrary code execution
  when processing an EPC Client update.
summary: >-
  Vulnerability in SonicWall SMA100 NetExtender Windows (32 and 64-bit) client
  10.2.339 and earlier versions allows an attacker to arbitrary code execution
  when processing an EPC Client update.
severity: high
cvss: 8.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-94
vendor: sonicwall
product: netextender
affected:
  - netextender < 10.2.341
patched:
  - netextender 10.2.341
published: '2024-07-18'
updated: '2026-11-03'
sourceUpdated: '2026-11-03T22:17:17.283'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2024-29014'
references:
  - url: 'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0011'
    label: PSIRT@sonicwall.com
  - url: 'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0011'
    label: af854a3a-2127-422b-91ae-364da2661108
tags:
  - nvd
  - cve.org
  - exploit-available
exploitAvailable: true
ssvc:
  exploitation: poc
  automatable: 'no'
  technicalImpact: total
  timestamp: '2024-11-27T04:55:17.683933Z'
scores:
  nvd: 8.8
  adp: 7.1
epss: 0.01864
epssPercentile: 0.79374
ingestedAt: '2026-11-05T06:38:03.576Z'
---

## Overview

Vulnerability in SonicWall SMA100 NetExtender Windows (32 and 64-bit) client 10.2.339 and earlier versions allows an attacker to arbitrary code execution when processing an EPC Client update.

## Affected

- `netextender < 10.2.341`

## Remediation

Upgrade past the affected range:

- `netextender 10.2.341`