CVE-2020-5144 - AskarLabs CVE Database

CVE-2020-5144

Vendor Sonicwall

Product SonicWall Global VPN Client

Weakness CWE-426

Published October 28, 2020

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

SonicWall Global VPN client version 4.10.4.0314 and earlier allows unprivileged windows user to elevate privileges to SYSTEM through loaded process hijacking vulnerability.

Key dates

02Disclosure timeline

October 28, 2020 CVE published

August 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2020-5144 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/426.html

Related vulnerabilities

04Related CVE

CVE-2020-6023 CVE-2024-47422 Adobe Framemaker | Untrusted Search Path (CWE-426) CVE-2026-32015 OpenClaw 2026.1.21 < 2026.2.19 - PATH Hijacking Bypass in tools.exec.safeBins Allowlist Validation CVE-2025-49124 Apache Tomcat: exe side-loading via icalcs.exe in Tomcat installer for Windows CVE-2026-29089 TimescaleDB uses untrusted search path during extension upgrade