VPN and endpoint clients
CVE-2021-20051: SonicWall Global VPN Client 4.10.7.1117 installer (32-bit and 64-bit) and earlier versions have a DLL Searc…
SonicWall Global VPN Client 4.10.7.1117 installer (32-bit and 64-bit) and earlier versions have a DLL Search Order Hijacking vulnerability in one of the installer components.
Published
Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.
Affected and fixed versions
| Product / branch | Fixed in |
|---|---|
| SonicWall Global VPN Client Global VPN Client 4.10 | See the advisory |
Always confirm against the vendor advisory, which lists every fixed hotfix.
What it is
SonicWall Global VPN Client 4.10.7.1117 installer (32-bit and 64-bit) and earlier versions have a DLL Search Order Hijacking vulnerability in one of the installer components. Successful exploitation via a local attacker could result in command execution in the target system.
Sources
KEV status, EPSS score and vendor data refreshed automatically, last on 13 Oct 2026.