CVE-2020-5131

EPSS 0.04%
Veröffentlicht 17.07.2020 18:15:12
Zuletzt bearbeitet 21.11.2024 05:33:36
Quelle PSIRT@sonicwall.com
CVE-Watchlists
Login
Unerledigt
Login

SonicWall NetExtender Windows client vulnerable to arbitrary file write vulnerability, this allows attacker to overwrite a DLL and execute code with the same privilege in the host operating system. This vulnerability impact SonicWall NetExtender Windows client version 9.0.815 and earlier.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Sonicwall ≫ Netextender SwPlatformwindows Version <= 9.0.815

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.04%	0.099

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	4.6	3.9	6.4	AV:L/AC:L/Au:N/C:P/I:P/A:P

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0004

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2020-5131

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2020-5131

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2020-5131

EUVD