Sonicwall

Global Vpn Client

6 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.8

CVE-2021-20051

  • EPSS 0.02%
  • Published 04.05.2022 16:15:07
  • Last modified 21.11.2024 05:45:51

SonicWall Global VPN Client 4.10.7.1117 installer (32-bit and 64-bit) and earlier versions have a DLL Search Order Hijacking vulnerability in one of the installer components. Successful exploitation via a local attacker could result in command execut...

7.8

CVE-2021-20047

  • EPSS 0.08%
  • Published 08.12.2021 10:15:08
  • Last modified 21.11.2024 05:45:51

SonicWall Global VPN client version 4.10.6 (32-bit and 64-bit) and earlier have a DLL Search Order Hijacking vulnerability. Successful exploitation via a local attacker could result in remote code execution in the target system.

7.8

CVE-2021-20037

  • EPSS 0.03%
  • Published 21.09.2021 09:15:07
  • Last modified 21.11.2024 05:45:49

SonicWall Global VPN Client 4.10.5 installer (32-bit and 64-bit) incorrect default file permission vulnerability leads to privilege escalation which potentially allows command execution in the host operating system. This vulnerability impacts GVC 4.1...

7.8

CVE-2020-5144

  • EPSS 0.06%
  • Published 28.10.2020 11:15:12
  • Last modified 21.11.2024 05:33:37

SonicWall Global VPN client version 4.10.4.0314 and earlier allows unprivileged windows user to elevate privileges to SYSTEM through loaded process hijacking vulnerability.

8.6

CVE-2020-5145

  • EPSS 0.17%
  • Published 28.10.2020 11:15:12
  • Last modified 21.11.2024 05:33:37

SonicWall Global VPN client version 4.10.4.0314 and earlier have an insecure library loading (DLL hijacking) vulnerability. Successful exploitation could lead to remote code execution in the target system.

9.3

CVE-2007-6273

Exploit
  • EPSS 6.01%
  • Published 07.12.2007 11:46:00
  • Last modified 09.04.2025 00:30:58

Multiple format string vulnerabilities in the configuration file in SonicWALL GLobal VPN Client 3.1.556 and 4.0.0.810 allow user-assisted remote attackers to execute arbitrary code via format string specifiers in the (1) Hostname tag or the (2) name ...