CVE-2020-5145CWE-427

SonicWall Global VPN client version 4.10.4.0314 and earlier have an insecure library loading (DLL hijacking) vulnerability

published October 28, 2020

CVSS
—
EPSS
1%
Percentile
69.0
In the wild
Unconfirmed
What it is

SonicWall Global VPN client version 4.10.4.0314 and earlier have an insecure library loading (DLL hijacking) vulnerability. Successful exploitation could lead to remote code execution in the target system.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01243 · 69.0th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2020-10-28T10:40Z
EPSS history
Timeline
  • 28 OCT 10:40Z
    SonicWall Global VPN client version 4.10.4.0314 and earlier have an insecure library loading (DLL hijacking) vulnerability
    cvelistv5