CVE-2015-4173 Unquoted Windows search path vulnerability in the autorun value in Dell SonicWall NetExtender before 7.5.227 and 8.0.x before 8.0.238, as used in the SRA firmware before 7.5.1.2-40sv and 8.x before 8....
MediumCVSS 6.9
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unquoted Windows search path vulnerability in the autorun value in Dell SonicWall NetExtender before 7.5.227 and 8.0.x before 8.0.238, as used in the SRA firmware before 7.5.1.2-40sv and 8.x before 8.0.0.3-23sv, allows local users to gain privileges via a Trojan horse program in the %SYSTEMDRIVE% folder.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| SonicWall NetExtender | < 7.5.227 | 7.5.227 |
| SonicWall NetExtender | >= 8.0, < 8.0.238 | 8.0.238 |
References
- packetstormsecurity.com third-party-advisory vdb-entry
- 20150824 Dell SonicWall NetExtender Unquoted Autorun Privilege Escalation mailing-list third-party-advisory vdb-entry
- 1033417 third-party-advisory vdb-entry
- support.software.dell.com broken-link