Approved changes feed: RSS · Atom

cpe:2.3:a:sonicwall:global_vpn_client:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSonicwall (28e2a9d1-aad2-54b9-a84d-b04e317de676)
ProductGlobal Vpn Client (2ddc1f7e-2ab6-5c28-b1be-4b5e9f7e53fb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-20051 vulnerable 2026-06-08 05:29:08.186677 Details available
SonicWall Global VPN Client 4.10.7.1117 installer (32-bit and 64-bit) and earlier versions have a DLL Search Order Hijacking vulnerability in one of the installer components. Successful exploitation via a local attacker could result in command execution in the target system.
Published: 2022-05-04T15:20:09.000Z
Updated: 2024-08-03T17:30:07.581Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20037 vulnerable 2026-06-08 05:29:08.126272 Details available
SonicWall Global VPN Client 4.10.5 installer (32-bit and 64-bit) incorrect default file permission vulnerability leads to privilege escalation which potentially allows command execution in the host operating system. This vulnerability impacts GVC 4.10.5 installer and earlier.
Published: 2021-09-21T08:50:11.000Z
Updated: 2024-08-03T17:30:07.615Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5145 vulnerable 2026-06-08 05:26:41.452656 Details available
SonicWall Global VPN client version 4.10.4.0314 and earlier have an insecure library loading (DLL hijacking) vulnerability. Successful exploitation could lead to remote code execution in the target system.
Published: 2020-10-28T10:40:15.000Z
Updated: 2024-08-04T08:22:09.084Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5144 vulnerable 2026-06-08 05:26:41.452247 Details available
SonicWall Global VPN client version 4.10.4.0314 and earlier allows unprivileged windows user to elevate privileges to SYSTEM through loaded process hijacking vulnerability.
Published: 2020-10-28T10:40:15.000Z
Updated: 2024-08-04T08:22:08.672Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.