Sonicwall Global VPN Client vulnerabilities

5 vulnerabilities

Known vulnerabilities in Sonicwall Global VPN Client, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.8CVE-2021-20047sonicwallglobal_vpn_client+1
EPSS score
0.88%
SonicWall Global VPN client version 4.10.6 (32-bit and 64-bit) and earlier have a DLL Search Order Hijacking vulnerability. Successful exploitation via a local attacker could result in remote code execution in the target system.7.8CVE-2021-20051sonicwallglobal_vpn_client+1
EPSS score
0.74%
SonicWall Global VPN Client 4.10.7.1117 installer (32-bit and 64-bit) and earlier versions have a DLL Search Order Hijacking vulnerability in one of the installer components. Successful exploitation via a local attacker could result in command execution in the target system.7.8CVE-2021-20037sonicwallglobal_vpn_client+1
EPSS score
0.42%
SonicWall Global VPN Client 4.10.5 installer (32-bit and 64-bit) incorrect default file permission vulnerability leads to privilege escalation which potentially allows command execution in the host operating system. This vulnerability impacts GVC 4.10.5 installer and earlier.8.6CVE-2020-5145sonicwallglobal_vpn_client+1
EPSS score
1.24%
SonicWall Global VPN client version 4.10.4.0314 and earlier have an insecure library loading (DLL hijacking) vulnerability. Successful exploitation could lead to remote code execution in the target system.7.8CVE-2020-5144sonicwallglobal_vpn_client+1
EPSS score
0.58%
SonicWall Global VPN client version 4.10.4.0314 and earlier allows unprivileged windows user to elevate privileges to SYSTEM through loaded process hijacking vulnerability.