CVE-2020-5147

Опубликовано: 09 янв. 2021

Источник: nvd

CVSS3: 5.3

CVSS2: 4.6

EPSS Низкий

Описание

SonicWall NetExtender Windows client vulnerable to unquoted service path vulnerability, this allows a local attacker to gain elevated privileges in the host operating system. This vulnerability impact SonicWall NetExtender Windows client version 10.2.300 and earlier.

Ссылки

http://packetstormsecurity.com/files/163857/SonicWall-NetExtender-10.2.0.300-Unquoted-Service-Path.html
Exploit
Third Party Advisory
VDB Entry
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0023
Vendor Advisory
http://packetstormsecurity.com/files/163857/SonicWall-NetExtender-10.2.0.300-Unquoted-Service-Path.html
Exploit
Third Party Advisory
VDB Entry
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0023
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:sonicwall:netextender:*:*:*:*:*:windows:*:*

Версия до 10.2.300 (включая)

EPSS

Процентиль: 27%

0.00094

Низкий

5.3 Medium

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-428

Связанные уязвимости

GHSA-hqm7-vfw5-95rq

github

больше 3 лет назад