Lucene search

K
cveSonicwallCVE-2020-5131
HistoryJul 17, 2020 - 6:15 p.m.

CVE-2020-5131

2020-07-1718:15:12
CWE-20
sonicwall
web.nvd.nist.gov
19
sonicwall
netextender
windows
vulnerability
arbitrary file write
cve-2020-5131

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0

Percentile

12.6%

SonicWall NetExtender Windows client vulnerable to arbitrary file write vulnerability, this allows attacker to overwrite a DLL and execute code with the same privilege in the host operating system. This vulnerability impact SonicWall NetExtender Windows client version 9.0.815 and earlier.

Affected configurations

Nvd
Node
sonicwallnetextenderRange9.0.815windows
VendorProductVersionCPE
sonicwallnetextender*cpe:2.3:a:sonicwall:netextender:*:*:*:*:*:windows:*:*

CNA Affected

[
  {
    "product": "SonicWall NetExtender",
    "vendor": "SonicWall",
    "versions": [
      {
        "status": "affected",
        "version": "9.0.815 and earlier"
      }
    ]
  }
]

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0

Percentile

12.6%

Related for CVE-2020-5131