CVE-2015-4173: Unquoted Windows search path vulnerability in the autorun value in Dell SonicWall NetExtender before 7.5.22...

Security readout for executives and security teams

This is an old local privilege escalation issue in Dell SonicWall NetExtender. A vulnerable Windows autorun configuration could let someone who already has local access gain higher privileges. It is most relevant where legacy NetExtender or SonicWall SRA firmware remains installed. Exposure is likely limited to Windows endpoints running affected NetExtender versions or environments tied to vulnerable SRA firmware. Modern, updated deployments are less likely exposed, but legacy VPN clients often persist on endpoints. Treat this as a legacy endpoint hygiene issue unless affected versions are still deployed. Prioritize remediation where VPN clients run on shared workstations, administrator systems, or other high-trust endpoints. Mitigation focus: Upgrade NetExtender to 7.5.227, 8.0.238, or later.; Update SonicWall SRA firmware to the fixed versions named in vendor guidance.; Remove unsupported or unused NetExtender installations from endpoints..

Prepared

Jun 13, 2026, 22:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.