DLL Search Order Hijacking Vulnerability in SonicWall Global VPN Client

CVE-2021-20047 · HIGH Severity

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

SonicWall Global VPN client version 4.10.6 (32-bit and 64-bit) and earlier have a DLL Search Order Hijacking vulnerability. Successful exploitation via a local attacker could result in remote code execution in the target system.

Learn more about our Web Application Penetration Testing UK.