CVE-2015-4173

Unquoted Windows search path vulnerability in the autorun value in Dell SonicWall NetExtender before 7.5.227 and 8.0.x before 8.0.238, as used in the SRA firmware before 7.5.1.2-40sv and 8.x before 8.0.0.3-23sv, allows local users to gain privileges via a Trojan horse program in the %SYSTEMDRIVE% folder.

• CWE-428

• http://packetstormsecurity.com/files/133302/Dell-SonicWall-NetExtender-7.5.215-Privilege-Escalation.htmlThird Party Advisory, VDB Entry
• http://www.securityfocus.com/archive/1/536303/100/0/threadedThird Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1033417Third Party Advisory, VDB Entry
• https://support.software.dell.com/product-notification/157537Broken Link
• http://packetstormsecurity.com/files/133302/Dell-SonicWall-NetExtender-7.5.215-Privilege-Escalation.htmlThird Party Advisory, VDB Entry
• http://www.securityfocus.com/archive/1/536303/100/0/threadedThird Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1033417Third Party Advisory, VDB Entry
• https://support.software.dell.com/product-notification/157537Broken Link

Published

Aug 26, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-4165The snapshot API in Elasticsearch before 1.6.0 when another …
• CVE-2015-4166Cloudera Key Trustee Server before 5.4.3 does not store keys…
• CVE-2015-4167The udf_read_inode function in fs/udf/inode.c in the Linux k…
• CVE-2015-4169Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2015-4170Race condition in the ldsem_cmpxchg function in drivers/tty/…
• CVE-2015-4171strongSwan 4.3.0 through 5.x before 5.3.2 and strongSwan VPN…
• CVE-2015-4174Cross-site scripting (XSS) vulnerability in the integrated w…
• CVE-2015-4176fs/namespace.c in the Linux kernel before 4.0.2 does not pro…
• CVE-2015-4177The collect_mounts function in fs/namespace.c in the Linux k…
• CVE-2015-4178The fs_pin implementation in the Linux kernel before 4.0.5 d…
• CVE-2015-4179Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2015-4180Directory traversal vulnerability in get_file.php in phpMyBa…