CVE-2020-5144

7.8 highEPSS 0.6%

High (7.8) in sonicwall global vpn client. EPSS 0.6% chance of exploitation in the next 30 days.

SonicWall Global VPN client version 4.10.4.0314 and earlier allows unprivileged windows user to elevate privileges to SYSTEM through loaded process hijacking vulnerability.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 47% of CVEs (scores of 2026-10-31)
CWE: CWE-426
Published: 2020-10-28
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

sonicwall:global_vpn_client

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0020
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0020

Check your stack JSON