cve.bz

CVE-2020-5147

5.3 mediumEPSS 1.7%

Medium (5.3) in sonicwall netextender. EPSS 1.7% chance of exploitation in the next 30 days.

SonicWall NetExtender Windows client vulnerable to unquoted service path vulnerability, this allows a local attacker to gain elevated privileges in the host operating system. This vulnerability impact SonicWall NetExtender Windows client version 10.2.300 and earlier.

Severity

CVSS 3.1

5.3 medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
EPSS
1.7% chance of exploitation in the next 30 days; higher than 76% of CVEs (scores of 2026-10-31)
CWE
CWE-428
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON