CVE-2020-5145

2020-10-2810:40:15

CWE-427

sonicwall

www.cve.org

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.7%

JSON

SonicWall Global VPN client version 4.10.4.0314 and earlier have an insecure library loading (DLL hijacking) vulnerability. Successful exploitation could lead to remote code execution in the target system.

CNA Affected

[
  {
    "product": "SonicWall Global VPN Client",
    "vendor": "SonicWall",
    "versions": [
      {
        "status": "affected",
        "version": "4.10.4.0314 and earlier"
      }
    ]
  }
]

References

psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0021