CVE-2021-20037: SonicWall Global VPN Client

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

SonicWall Global VPN Client 4.10.5 installer (32-bit and 64-bit) incorrect default file permission vulnerability leads to privilege escalation which potentially allows command execution in the host operating system. This vulnerability impacts GVC 4.10.5 installer and earlier.

Affected products

• SonicWall Global VPN Client: up to and including 4.10.5

Published 2021-09-21. Last modified 2026-06-17.