Wiz
Vulnerability DatabaseCVE-2020-5131

CVE-2020-5131: 
SonicWall NetExtender vulnerability analysis and mitigation

Overview

CVE-2020-5131 is a security vulnerability affecting the SonicWall NetExtender Windows client version 9.0.815 and earlier. The vulnerability was discovered and disclosed in December 2019, as indicated by the CVE record creation date. This arbitrary file write vulnerability allows attackers to overwrite a DLL and execute code with the same privileges in the host operating system (NVD, CVE).

Technical details

The vulnerability is classified as an arbitrary file write vulnerability that specifically affects the SonicWall NetExtender Windows client. The issue allows an attacker to overwrite a DLL file, which can lead to code execution with the same privileges as the host operating system (NVD).

Impact

If successfully exploited, this vulnerability allows attackers to execute code with the same privileges as the host operating system, potentially leading to unauthorized control over the affected system (NVD).

Exploitability

The vulnerability affects SonicWall NetExtender Windows client version 9.0.815 and earlier versions. The arbitrary file write capability makes this vulnerability particularly concerning as it provides a direct path to code execution (NVD).

Mitigation and workarounds

Users should upgrade to a version newer than SonicWall NetExtender Windows client 9.0.815. The vulnerability has been addressed in subsequent releases (CVE).

Additional resources

Source: This report was generated using AI

Related SonicWall NetExtender vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2024-29014HIGH8.8
  • SonicWall NetExtender logoSonicWall NetExtender
  • cpe:2.3:a:sonicwall:netextender
NoYesJul 18, 2024
CVE-2025-23010HIGH7.2
  • SonicWall NetExtender logoSonicWall NetExtender
  • cpe:2.3:a:sonicwall:netextender
NoNoApr 10, 2025
CVE-2025-23009HIGH7.2
  • SonicWall NetExtender logoSonicWall NetExtender
  • cpe:2.3:a:sonicwall:netextender
NoNoApr 10, 2025
CVE-2025-23008HIGH7.2
  • SonicWall NetExtender logoSonicWall NetExtender
  • cpe:2.3:a:sonicwall:netextender
NoNoApr 10, 2025
CVE-2025-23007MEDIUM5.5
  • SonicWall NetExtender logoSonicWall NetExtender
  • cpe:2.3:a:sonicwall:netextender
NoNoJan 30, 2025

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Additional Wiz resources

Cloud Vulnerability DB

Cloud Vulnerability DB

A community-led vulnerabilities database

Cloud Threat Landscape

Cloud Threat Landscape

A threat intelligence database

PEACH

PEACH

A tenant isolation framework

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management
Get a demo