CVE-2020-5145

HighCVSS 8.6/10Last modified Jun 17, 2026

Description

SonicWall Global VPN client version 4.10.4.0314 and earlier have an insecure library loading (DLL hijacking) vulnerability. Successful exploitation could lead to remote code execution in the target system.

Metrics

CVSS 3.1 8.6/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-427

Affected software

No affected versions have been published.

Timeline

Published
Oct 28, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-51467.2A vulnerability in SonicWall SMA100 appliance allow an authenticated management-user to perform OS command injection using HTTP POST parametCVE-2020-51475.3SonicWall NetExtender Windows client vulnerable to unquoted service path vulnerability, this allows a local attacker to gain elevated privilCVE-2020-51488.2SonicWall SSO-agent default configuration uses NetAPI to probe the associated IP's in the network, this client probing method allows a potenCVE-2020-51797.2Comtech Stampede FX-1010 7.4.3 devices allow remote authenticated administrators to execute arbitrary OS commands by navigating to the DiagnCVE-2020-51807.8Viscosity 1.8.2 on Windows and macOS allows an unprivileged user to set a subset of OpenVPN parameters, which can be used to load a maliciouCVE-2020-51826.5The J-BusinessDirectory extension before 5.2.9 for Joomla! allows Reverse Tabnabbing. In some configurations, the link to the business websiCVE-2020-51837.5FTPGetter Professional 5.97.0.223 is vulnerable to a memory corruption bug when a user sends a specially crafted string to the application. CVE-2020-51865.4DNN (formerly DotNetNuke) through 9.4.4 allows XSS (issue 1 of 2).CVE-2020-51878.8DNN (formerly DotNetNuke) through 9.4.4 allows Path Traversal (issue 2 of 2).CVE-2020-51886.5DNN (formerly DotNetNuke) through 9.4.4 has Insecure Permissions.CVE-2020-51916.1PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple Persistent XSS vulnerabilities.CVE-2020-51928.8PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple SQL injection vulnerabilities: multiple pages and parameters are not
CVE-2020-5145: High severity, CVSS 8.6 | Vulnix