CVE-2020-11634

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

The Zscaler Client Connector for Windows prior to 2.1.2.105 had a DLL hijacking vulnerability caused due to the configuration of OpenSSL. A local adversary may be able to execute arbitrary code in the SYSTEM context.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-427

Affected software

No affected versions have been published.

Timeline

Published
Jul 15, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-116357.8The Zscaler Client Connector prior to 3.1.0 did not sufficiently validate RPC clients, which allows a local adversary to execute code with sCVE-2020-116377.5A memory leak in the TFTP service in B&R Automation Runtime versions <N4.26, <N4.34, <F4.45, <E4.53, <D4.63, <A4.73 and prior could allow anCVE-2020-116397.8An attacker could exploit the vulnerability by injecting garbage data or specially crafted data. Depending on the data injected each processCVE-2020-11647.0An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory. An attacker who successfully eCVE-2020-116408.8AdvaBuild uses a command queue to launch certain operations. An attacker who gains access to the command queue can use it to launch an attacCVE-2020-116416.5A local file inclusion vulnerability in B&R SiteManager versions <9.2.620236042 allows authenticated users to read sensitive files from SiteCVE-2020-116426.5The local file inclusion vulnerability present in B&R SiteManager versions <9.2.620236042 allows authenticated users to impact availability CVE-2020-116436.5An information disclosure vulnerability in B&R GateManager 4260 and 9250 versions <9.0.20262 and GateManager 8250 versions <9.2.620236042 alCVE-2020-116446.5The information disclosure vulnerability present in B&R GateManager 4260 and 9250 versions <9.0.20262 and GateManager 8250 versions <9.2.620CVE-2020-116456.5A denial of service vulnerability in B&R GateManager 4260 and 9250 versions <9.0.20262 and GateManager 8250 versions <9.2.620236042 allows aCVE-2020-116464.3A log information disclosure vulnerability in B&R GateManager 4260 and 9250 versions <9.0.20262 and GateManager 8250 versions <9.2.620236042CVE-2020-116477.5In Wireshark 3.2.0 to 3.2.2, 3.0.0 to 3.0.9, and 2.6.0 to 2.6.15, the BACapp dissector could crash. This was addressed in epan/dissectors/pa
CVE-2020-11634: High severity, CVSS 7.8 | Vulnix