CVE-2020-5131

2020-07-1717:15:15

CWE-20

sonicwall

www.cve.org

sonicwall netextender

windows

arbitrary file write

EPSS

Percentile

12.6%

JSON

SonicWall NetExtender Windows client vulnerable to arbitrary file write vulnerability, this allows attacker to overwrite a DLL and execute code with the same privilege in the host operating system. This vulnerability impact SonicWall NetExtender Windows client version 9.0.815 and earlier.

CNA Affected

[
  {
    "product": "SonicWall NetExtender",
    "vendor": "SonicWall",
    "versions": [
      {
        "status": "affected",
        "version": "9.0.815 and earlier"
      }
    ]
  }
]

References

psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0004

EPSS

Percentile

12.6%

JSON

Related for CVELIST:CVE-2020-5131