CVE-2021-20037

7.8 highEPSS 0.4%

High (7.8) in sonicwall global vpn client. EPSS 0.4% chance of exploitation in the next 30 days.

SonicWall Global VPN Client 4.10.5 installer (32-bit and 64-bit) incorrect default file permission vulnerability leads to privilege escalation which potentially allows command execution in the host operating system. This vulnerability impacts GVC 4.10.5 installer and earlier.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 35% of CVEs (scores of 2026-10-31)
CWE: CWE-276
Published: 2021-09-21
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

sonicwall:global_vpn_client

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0024
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0024

Check your stack JSON