CVE-2020-5131

Description

SonicWall NetExtender Windows client vulnerable to arbitrary file write vulnerability, this allows attacker to overwrite a DLL and execute code with the same privilege in the host operating system. This vulnerability impact SonicWall NetExtender Windows client version 9.0.815 and earlier.

Risk Information

Base Score
7.8
MODERATE
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.043

Associated Vulnerability

VulnerabilityOS Platform
Vulnerabilities CVE-2020-5131 are affected in SonicWall NetExtender (MSI) (x64) 9.0.815Windows
Vulnerabilities CVE-2020-5131 are affected in SonicWall NetExtender (x64) 9.0.815Windows
Improper Input Validation Vulnerability (CVE-2020-5131)NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234