CVE-2021-20051

7.8HIGH

Key Information

Vendor
Sonicwall
Status
Sonicwall Global Vpn Client
Vendor
CVE Published:
4 May 2022

Summary

SonicWall Global VPN Client 4.10.7.1117 installer (32-bit and 64-bit) and earlier versions have a DLL Search Order Hijacking vulnerability in one of the installer components. Successful exploitation via a local attacker could result in command execution in the target system.

Affected Version(s)

SonicWall Global VPN Client = Global VPN Client 4.10.7.1117 and earlier versions

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published.

  • Vulnerability Reserved.

Collectors

NVD DatabaseMitre Database
.