Sonicwall Global Vpn Client vulnerabilities

7 vulnerabilities

Known vulnerabilities in Sonicwall Global Vpn Client, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.8CVE-2021-20047sonicwallglobal_vpn_client+1
EPSS score
0.88%
SonicWall Global VPN client version 4.10.6 (32-bit and 64-bit) and earlier have a DLL Search Order Hijacking vulnerability. Successful exploitation via a local attacker could result in remote code execution in the target system.7.8CVE-2021-20051sonicwallglobal_vpn_client+1
EPSS score
0.74%
SonicWall Global VPN Client 4.10.7.1117 installer (32-bit and 64-bit) and earlier versions have a DLL Search Order Hijacking vulnerability in one of the installer components. Successful exploitation via a local attacker could result in command execution in the target system.7.8CVE-2021-20037sonicwallglobal_vpn_client+1
EPSS score
0.42%
SonicWall Global VPN Client 4.10.5 installer (32-bit and 64-bit) incorrect default file permission vulnerability leads to privilege escalation which potentially allows command execution in the host operating system. This vulnerability impacts GVC 4.10.5 installer and earlier.9.3CVE-2007-6273sonicwallglobal_vpn_client
EPSS score
6.20%
Multiple format string vulnerabilities in the configuration file in SonicWALL GLobal VPN Client 3.1.556 and 4.0.0.810 allow user-assisted remote attackers to execute arbitrary code via format string specifiers in the (1) Hostname tag or the (2) name attribute in the Connection tag. NOTE: there might not be any realistic circumstances in which this issue crosses privilege boundaries.8.6CVE-2020-5145sonicwallglobal_vpn_client+1
EPSS score
1.24%
SonicWall Global VPN client version 4.10.4.0314 and earlier have an insecure library loading (DLL hijacking) vulnerability. Successful exploitation could lead to remote code execution in the target system.7.8CVE-2020-5144sonicwallglobal_vpn_client+1
EPSS score
0.58%
SonicWall Global VPN client version 4.10.4.0314 and earlier allows unprivileged windows user to elevate privileges to SYSTEM through loaded process hijacking vulnerability.5.5CVE-2026-66151sonicwallglobal_vpn_client
EPSS score
0.16%
SonicWall Global VPN Client version 4.10.8.1108 and earlier is vulnerable to an out-of-bounds kernel memory read in the SWIPsec.sys driver, which could allow a local attacker to cause a system crash.