CVE-2020-5145CWE-427

CVE-2020-5145: vulnerability in SonicWall Global VPN Client

Published · Updated

Follow this CVE+ Monitor SonicWall Global VPN Client

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.2%
SonicWall Global VPN client version 4.10.4.0314 and earlier have an insecure library loading (DLL hijacking) vulnerability. Successful exploitation could lead to remote code execution in the target system.
Affected products
SonicWall · SonicWall Global VPN Client
Related CVEs — SonicWall Global VPN Client

In the same product, most dangerous first.

CVE-2021-20047—CVE-2021-20047EPSS 0.9%CVE-2021-20051—CVE-2021-20051EPSS 0.7%CVE-2020-5144—CVE-2020-5144EPSS 0.6%CVE-2021-20037—CVE-2021-20037EPSS 0.4%