CVE-2025-32817

Description

A Improper Link Resolution vulnerability (CWE-59) in the SonicWall Connect Tunnel Windows (32 and 64 bit) client, this results in unauthorized file overwrite, potentially leading to denial of service or file corruption.

Reserved 2025-04-11 | Published 2025-04-16 | Updated 2025-04-17 | Assigner sonicwall

Problem types

CWE-59 Improper Link Resolution Before File Access ('Link Following')

Product status

Default status
unknown

12.4.3.283 and earlier versions
affected

References

psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0007 vendor-advisory

cve.org (CVE-2025-32817)

nvd.nist.gov (CVE-2025-32817)

Download JSON