VULNERABILITY INTELLIGENCE

CVE-2020-5145

CVSS score8.6 HIGH
EPSS probability1.24%
CISA KEVNot currently listed
Published2020-10-28
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Description

SonicWall Global VPN client version 4.10.4.0314 and earlier have an insecure library loading (DLL hijacking) vulnerability. Successful exploitation could lead to remote code execution in the target system.

Weakness classification

  • CWE-427: Uncontrolled Search Path Element

Primary references