VPN and endpoint clients
CVE-2022-22281: Buffer overflow in SonicWall NetExtender Windows (32 and 64 bit) Client
A buffer overflow vulnerability in the SonicWall SSL-VPN NetExtender Windows Client (32 and 64 bit) in 10.2.322 and earlier versions, allows an attacker to potentially execute arbitrary code in the host windows operating system.
Published
Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.
Affected and fixed versions
| Product / branch | Fixed in |
|---|---|
| SonicWall NetExtender Windows (32 and 64 bit) Client 10.2 | See the advisory |
Always confirm against the vendor advisory, which lists every fixed hotfix.
What it is
A buffer overflow vulnerability in the SonicWall SSL-VPN NetExtender Windows Client (32 and 64 bit) in 10.2.322 and earlier versions, allows an attacker to potentially execute arbitrary code in the host windows operating system.
Sources
KEV status, EPSS score and vendor data refreshed automatically, last on 13 Oct 2026.