CVE-2015-4173 Privilege escalation in n/a

What is CVE-2015-4173?

CVE-2015-4173 is a medium-severity vulnerability in n/a, published on 26 Aug 2015. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Unquoted Windows search path vulnerability in the autorun value in Dell SonicWall NetExtender before 7.5.227 and 8.0.x before 8.0.238, as used in the SRA firmware before 7.5.1.2-40sv and 8.x before 8.0.0.3-23sv, allows local users to gain privileges via a Trojan horse program in the %SYSTEMDRIVE% folder.

Weakness: CWE-428

Which versions are affected by CVE-2015-4173?

It affects 1 product.

Products include Sonicwall Netextender.

How do I fix CVE-2015-4173?

No fix has been published for CVE-2015-4173 yet. Limit exposure of the affected software until one is available.

Is CVE-2015-4173 being exploited?

There is no known exploitation of CVE-2015-4173 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2023-44218 Privilege escalation in NetExtender High 8.8
• CVE-2023-44217 Privilege escalation in NetExtender High 7.8
• CVE-2022-22281 Memory corruption in SonicWall NetExtender Windows (32 and 64 bit) Client High 7.8
• CVE-2020-5131 Path traversal in SonicWall NetExtender High 7.8
• CVE-2023-44220 Other in NetExtender High 7.3

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-34vh-gp42-g4h6.