VPN and endpoint clients
CVE-2024-45315: Link following in Connect Tunnel
The Improper link resolution before file access ('Link Following') vulnerability in SonicWall Connect Tunnel (version 12.4.3.271 and earlier of Windows client) allows users with standard privileges to create arbitrary folders and files, potentially leading to local Denial of Service (DoS) attack.
Published
Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.
Affected and fixed versions
| Product / branch | Fixed in |
|---|---|
| Connect Tunnel (Windows) 12.4 | See the advisory |
Always confirm against the vendor advisory, which lists every fixed hotfix.
What it is
The Improper link resolution before file access ('Link Following') vulnerability in SonicWall Connect Tunnel (version 12.4.3.271 and earlier of Windows client) allows users with standard privileges to create arbitrary folders and files, potentially leading to local Denial of Service (DoS) attack.
Sources
KEV status, EPSS score and vendor data refreshed automatically, last on 13 Oct 2026.