CVE-2021-20051

{"id": "CVE-2021-20051", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.9, "accessVector": "LOCAL", "vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.4, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2022-05-04T16:15:07.997", "references": [{"url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0036", "tags": ["Vendor Advisory"], "source": "PSIRT@sonicwall.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-427"}]}, {"type": "Secondary", "source": "PSIRT@sonicwall.com", "description": [{"lang": "en", "value": "CWE-427"}]}], "descriptions": [{"lang": "en", "value": "SonicWall Global VPN Client 4.10.7.1117 installer (32-bit and 64-bit) and earlier versions have a DLL Search Order Hijacking vulnerability in one of the installer components. Successful exploitation via a local attacker could result in command execution in the target system."}, {"lang": "es", "value": "El instalador de SonicWall Global VPN Client versi\u00f3n 4.10.7.1117 (32 y 64 bits) y versiones anteriores, presentan una vulnerabilidad de secuestro de orden de b\u00fasqueda de DLL en uno de los componentes del instalador. Una explotaci\u00f3n con \u00e9xito por medio de un atacante local podr\u00eda resultar en una ejecuci\u00f3n de comandos en el sistema de destino"}], "lastModified": "2022-05-12T16:12:45.750", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:sonicwall:global_vpn_client:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1A711819-3994-4CA8-A5B5-EAA4A48E95B5", "versionEndIncluding": "4.10.7.1117"}], "operator": "OR"}]}], "sourceIdentifier": "PSIRT@sonicwall.com"}