medium5.3Public exploit code
CVE-2020-5147
SonicWall NetExtender Windows client vulnerable to unquoted service path vulnerability, this allows a local attacker to gain elevated privileges in the host op…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- SonicWall NetExtender 10.2.0.300 - Unquoted Service Path2021-08-17 · local · windows
Impact
SonicWall NetExtender Windows client vulnerable to unquoted service path vulnerability, this allows a local attacker to gain elevated privileges in the host operating system. This vulnerability impact SonicWall NetExtender Windows client version 10.2.300 and earlier.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sonicwall | Netextender | through 10.2.300 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/163857/SonicWall-NetExtender-10.2.0.300-Unquoted-Service-Path.html
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0023
- http://packetstormsecurity.com/files/163857/SonicWall-NetExtender-10.2.0.300-Unquoted-Service-Path.html
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0023