What’s Vulnerable › Vulnerabilities

CVE-2021-20047

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-12-08 · updated 2026-06-17
• Weakness: CWE-427

Description

SonicWall Global VPN client version 4.10.6 (32-bit and 64-bit) and earlier have a DLL Search Order Hijacking vulnerability. Successful exploitation via a local attacker could result in remote code execution in the target system.

Affected products

• SonicWall Global VPN Client: through 4.10.6

References

• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0025
• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0025

Get alerted when CVE-2021-20047 or the next vulnerability affects your stack