What is CVE-2020-5147?

CVE-2020-5147 is a vulnerability in SonicWall NetExtender Windows client version 10.2.300 and earlier that allows a local attacker to gain elevated privileges in the host operating system.

How severe is CVE-2020-5147?

CVE-2020-5147 has a severity rating of 5.3, which is considered medium.

Which software versions are affected by CVE-2020-5147?

SonicWall NetExtender Windows client version 10.2.300 and earlier are affected by CVE-2020-5147.

How can the unquoted service path vulnerability be exploited?

The unquoted service path vulnerability in SonicWall NetExtender Windows client can be exploited by a local attacker to gain elevated privileges in the host operating system.

Where can I find more information about CVE-2020-5147?

You can find more information about CVE-2020-5147 at the following references: [Packet Storm Security](http://packetstormsecurity.com/files/163857/SonicWall-NetExtender-10.2.0.300-Unquoted-Service-Path.html) and [SonicWall PSIRT](https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0023).

Vulnerability/
CVE-2020-5147

medium

5.3

CWE

428

9/1/2021

4/8/2024

CVE-2020-5147

First published: Sat Jan 09 2021(Updated: )

SonicWall NetExtender Windows client vulnerable to unquoted service path vulnerability, this allows a local attacker to gain elevated privileges in the host operating system. This vulnerability impact SonicWall NetExtender Windows client version 10.2.300 and earlier.

Credit: PSIRT@sonicwall.com

Affected Software	Affected Version	How to fix
SonicWall NetExtender Windows	<=10.2.300

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is CVE-2020-5147?
CVE-2020-5147 is a vulnerability in SonicWall NetExtender Windows client version 10.2.300 and earlier that allows a local attacker to gain elevated privileges in the host operating system.
How severe is CVE-2020-5147?
CVE-2020-5147 has a severity rating of 5.3, which is considered medium.
Which software versions are affected by CVE-2020-5147?
SonicWall NetExtender Windows client version 10.2.300 and earlier are affected by CVE-2020-5147.
How can the unquoted service path vulnerability be exploited?
The unquoted service path vulnerability in SonicWall NetExtender Windows client can be exploited by a local attacker to gain elevated privileges in the host operating system.
Where can I find more information about CVE-2020-5147?
You can find more information about CVE-2020-5147 at the following references: [Packet Storm Security](http://packetstormsecurity.com/files/163857/SonicWall-NetExtender-10.2.0.300-Unquoted-Service-Path.html) and [SonicWall PSIRT](https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0023).

collector/nvd-index
agent/event
agent/references
agent/severity
agent/weakness
agent/author
agent/description
agent/type
agent/last-modified-date
agent/softwarecombine
agent/first-publish-date
agent/tags
collector/mitre-cve
source/MITRE
vendor/sonicwall
canonical/sonicwall netextender windows
version/sonicwall netextender windows/10.2.300

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.