CVE-2020-5145

HIGH

Sonicwall Global VPN Client < 4.10.4.0314 - Uncontrolled Search Path

Title source: rule

Description

SonicWall Global VPN client version 4.10.4.0314 and earlier have an insecure library loading (DLL hijacking) vulnerability. Successful exploitation could lead to remote code execution in the target system.

References (1)

[Vendor Advisory] https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0021

Scores

CVSS v3 8.6

EPSS 0.0017

EPSS Percentile 37.5%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Classification

CWE

CWE-427

Status published

Affected Products (1)

sonicwall/global_vpn_client < 4.10.4.0314

Timeline

Published Oct 28, 2020

Tracked Since Feb 18, 2026