sonicwall global-vpn-client CVE-2020-5145 is a vulnerability in SonicWall Global Vpn Client
Published on October 28, 2020

SonicWall Global VPN client version 4.10.4.0314 and earlier have an insecure library loading (DLL hijacking) vulnerability. Successful exploitation could lead to remote code execution in the target system.

NVD

Weakness Type

What is a DLL preloading Vulnerability?

The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

CVE-2020-5145 has been classified to as a DLL preloading vulnerability or weakness.


Products Associated with CVE-2020-5145

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2020-5145 are published in SonicWall Global Vpn Client:

 

Affected Versions

SonicWall Global VPN Client Version 4.10.4.0314 and earlier is affected by CVE-2020-5145

Exploit Probability

EPSS
0.17%
Percentile
37.65%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.