CVE-2021-20047

Description

SonicWall Global VPN client version 4.10.6 (32-bit and 64-bit) and earlier have a DLL Search Order Hijacking vulnerability. Successful exploitation via a local attacker could result in remote code execution in the target system.

Affected products

• SonicWall / SonicWall Global VPN ClientGlobal VPN Client 4.10.6 and earlier – Global VPN Client 4.10.6 and earlier

References

• VENDOR_ADVISORYhttps://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0025