Lucene search

[email protected]CVE-2021-20037

HistorySep 21, 2021 - 9:15 a.m.

CVE-2021-20037

2021-09-2109:15:07

CWE-276

[email protected]

web.nvd.nist.gov

cve-2021-20037

sonicwall

vpn

client

installer

default file permission

vulnerability

privilege escalation

command execution

operating system

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.9 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.6%

JSON

SonicWall Global VPN Client 4.10.5 installer (32-bit and 64-bit) incorrect default file permission vulnerability leads to privilege escalation which potentially allows command execution in the host operating system. This vulnerability impacts GVC 4.10.5 installer and earlier.

Affected configurations

NVD

Node

sonicwallglobal_vpn_clientRange≤4.10.5

CPENameOperatorVersion
sonicwall:global_vpn_clientsonicwall global vpn clientle4.10.5

CPE	Name	Operator	Version
sonicwall:global_vpn_client	sonicwall global vpn client	le	4.10.5

CNA Affected

[
  {
    "product": "SonicWall Global VPN Client",
    "vendor": "SonicWall",
    "versions": [
      {
        "status": "affected",
        "version": "Global VPN Client 4.10.5 and earlier"
      }
    ]
  }
]

References

psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0024

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.9 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.6%

JSON

Related for CVE-2021-20037

prion1 cvelist1 nvd1