HIGH🇵🇱 Wersja polska

CVE-2020-5131

CVSS 7.8v3.1pub. 2020-07-17upd. 2024-11-21

SonicWall NetExtender Windows client vulnerable to arbitrary file write vulnerability, this allows attacker to overwrite a DLL and execute code with the same privilege in the host operating system. This vulnerability impact SonicWall NetExtender Windows client version 9.0.815 and earlier.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

  • Sonicwall Netextender

    APP
    Sonicwall
    ≤ 9.0.815
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2024-29014HIGH8.8ten sam produkt

Vulnerability in SonicWall SMA100 NetExtender Windows (32 and 64-bit) client 10.2.339 and earlier versions all...

CVE-2023-44220HIGH7.3ten sam produkt

SonicWall NetExtender Windows (32-bit and 64-bit) client 10.2.336 and earlier versions have a DLL Search Order...

CVE-2023-44218HIGH8.8ten sam produkt

A flaw within the SonicWall NetExtender Pre-Logon feature enables an unauthorized user to gain access to the ...

CVE-2023-44217HIGH7.8ten sam produkt

A local privilege escalation vulnerability in SonicWall Net Extender MSI client for Windows 10.2.336 and earl...

CVE-2022-22281HIGH7.8ten sam produkt

A buffer overflow vulnerability in the SonicWall SSL-VPN NetExtender Windows Client (32 and 64 bit) in 10.2.32...