Security Vulnerabilities fixed in SonicWALL Global VPN Client SNWLID-2020-0021

Description

SonicWall Global VPN client version 4.10.4.0314 and earlier have an insecure library loading (DLL hijacking) and elevated privileges vulnerabilities. Successful exploitation could lead to remote code execution in the target system.

Affected Applications

Global VPN Client

CVE References

CVE-2020-5145 CVE-2020-5144

Other References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0021