VYPR
← All advisories
High severity7.8NVD Advisory· Published Sep 21, 2021· Updated Jun 17, 2026

CVE-2021-20037

CVE-2021-20037

Description

SonicWall Global VPN Client 4.10.5 installer (32-bit and 64-bit) incorrect default file permission vulnerability leads to privilege escalation which potentially allows command execution in the host operating system. This vulnerability impacts GVC 4.10.5 installer and earlier.

Affected products

3
  • SonicWall/Global VPN Client3 versions
    cpe:2.3:a:sonicwall:global_vpn_client:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:sonicwall:global_vpn_client:*:*:*:*:*:*:*:*range: <=4.10.5
    • (no CPE)range: <=4.10.5
    • (no CPE)range: Global VPN Client 4.10.5 and earlier

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.