Skip to main content

Netextender CVE-2015-4173

MEDIUM
Unquoted Search Path or Element (CWE-428)
2015-08-26 cve@mitre.org
Sonicwall Information Disclosure Dell Microsoft Netextender
6.9
CVSS 2.0 · NVD
Share

Severity by source

NVD PRIMARY
6.9 MEDIUM
AV:L/AC:M/Au:N/C:C/I:C/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:L/AC:M/Au:N/C:C/I:C/A:C
Attack Vector
Local
Attack Complexity
M
Confidentiality
C
Integrity
C
Availability
C

Lifecycle Timeline

1
CVE Published
Aug 26, 2015 - 19:59 cve.org
MEDIUM 6.9

DescriptionCVE.org

Unquoted Windows search path vulnerability in the autorun value in Dell SonicWall NetExtender before 7.5.227 and 8.0.x before 8.0.238, as used in the SRA firmware before 7.5.1.2-40sv and 8.x before 8.0.0.3-23sv, allows local users to gain privileges via a Trojan horse program in the %SYSTEMDRIVE% folder.

AnalysisAI

Unquoted Windows search path vulnerability in the autorun value in Dell SonicWall NetExtender before 7.5.227 and 8.0.x before 8.0.238, as used in the SRA firmware before 7.5.1.2-40sv and 8.x before. Rated medium severity (CVSS 6.9). No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-428. Unquoted Windows search path vulnerability in the autorun value in Dell SonicWall NetExtender before 7.5.227 and 8.0.x before 8.0.238, as used in the SRA firmware before 7.5.1.2-40sv and 8.x before 8.0.0.3-23sv, allows local users to gain privileges via a Trojan horse program in the %SYSTEMDRIVE% folder. Affected products include: Sonicwall Netextender. Version information: before 7.5.227.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Netextender

View all
CVE-2024-29014 HIGH
8.8 Jul 18

Vulnerability in SonicWall SMA100 NetExtender Windows (32 and 64-bit) client 10.2.339 and earlier versions allows an att
CVE-2023-44218 HIGH
7.8 Oct 03

A flaw within the SonicWall NetExtender Pre-Logon feature enables an unauthorized user to gain access to the host Window
CVE-2023-44217 HIGH
7.8 Oct 03

A local privilege escalation vulnerability in SonicWall Net Extender MSI client for Windows 10.2.336 and earlier version
CVE-2022-22281 HIGH
7.8 May 13

A buffer overflow vulnerability in the SonicWall SSL-VPN NetExtender Windows Client (32 and 64 bit) in 10.2.322 and earl
CVE-2020-5131 HIGH
7.8 Jul 17

SonicWall NetExtender Windows client vulnerable to arbitrary file write vulnerability, this allows attacker to overwrite
CVE-2023-44220 HIGH
7.3 Oct 27

SonicWall NetExtender Windows (32-bit and 64-bit) client 10.2.336 and earlier versions have a DLL Search Order Hijacking

Same weakness CWE-428 – Unquoted Search Path or Element

View all
CVE-2022-50935 CRITICAL POC
9.8
CVE-2023-38408 CRITICAL POC
9.8
CVE-2025-71326 HIGH POC
8.5
CVE-2016-20090 HIGH POC
8.5
CVE-2016-20089 HIGH POC
8.5
CVE-2020-37252 HIGH POC
8.5
CVE-2023-54353 HIGH POC
8.5
CVE-2020-37254 HIGH POC
8.5

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2015-4173 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy