CVE-2021-20037CWE-276

SonicWall Global VPN Client 4.10.5 installer (32-bit and 64-bit) incorrect default file permission vulnerability leads to privilege escalation which…

published September 21, 2021

CVSS
—
EPSS
0%
Percentile
34.9
In the wild
Unconfirmed
What it is

SonicWall Global VPN Client 4.10.5 installer (32-bit and 64-bit) incorrect default file permission vulnerability leads to privilege escalation which potentially allows command execution in the host operating system. This vulnerability impacts GVC 4.10.5 installer and earlier.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00417 · 34.9th percentile
Weakness
CWE-276 · Incorrect Default Permissions
Published
2021-09-21T08:50Z
EPSS history
Timeline
  • 21 SEP 08:50Z
    SonicWall Global VPN Client 4.10.5 installer (32-bit and 64-bit) incorrect default file permission vulnerability leads to privilege escalation which…
    cvelistv5