VPN and endpoint clients
CVE-2021-20037: SonicWall Global VPN Client 4.10.5 installer (32-bit and 64-bit) incorrect default file permission in SonicWall Global VPN Client
SonicWall Global VPN Client 4.10.5 installer (32-bit and 64-bit) incorrect default file permission vulnerability leads to privilege escalation which potentially allows command execution in the host operating system.
Published
Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.
Affected and fixed versions
| Product / branch | Fixed in |
|---|---|
| SonicWall Global VPN Client Global VPN Client 4.10 | See the advisory |
Always confirm against the vendor advisory, which lists every fixed hotfix.
What it is
SonicWall Global VPN Client 4.10.5 installer (32-bit and 64-bit) incorrect default file permission vulnerability leads to privilege escalation which potentially allows command execution in the host operating system. This vulnerability impacts GVC 4.10.5 installer and earlier.
Sources
KEV status, EPSS score and vendor data refreshed automatically, last on 13 Oct 2026.