CVE-2020-5147

Name of the Vulnerable Software and Affected Versions SonicWall NetExtender Windows client versions 10.2.300 and earlier

Description The SonicWall NetExtender Windows client is affected by an unquoted service path vulnerability. This issue allows a local attacker to gain elevated privileges in the host operating system.

Recommendations For versions 10.2.300 and earlier, update to a version later than 10.2.300 to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable service path to minimize the risk of exploitation.