CVE-2015-2248: CSRF
Cross-site request forgery (CSRF) vulnerability in the user portal in Dell SonicWALL Secure Remote Access (SRA) products with firmware before 7.5.1.0-38sv and 8.x before 8.0.0.1-16sv allows remote attackers to hijack the authentication of users for requests that create bookmarks via a crafted request to cgi-bin/editBookmark.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2015-2248?
CVE-2015-2248 is rated as a medium severity vulnerability due to its potential for exploiting users' authentication in Dell SonicWALL SRA products.
How do I fix CVE-2015-2248?
To fix CVE-2015-2248, update the affected Dell SonicWALL Secure Remote Access firmware to version 7.5.1.0-38sv or 8.0.0.1-16sv or later.
Which Dell SonicWALL Secure Remote Access firmware versions are affected by CVE-2015-2248?
CVE-2015-2248 affects Dell SonicWALL Secure Remote Access firmware versions prior to 7.5.1.0-38sv and 8.x prior to 8.0.0.1-16sv.
What type of attack does CVE-2015-2248 enable?
CVE-2015-2248 enables a cross-site request forgery (CSRF) attack that allows remote attackers to hijack user authentication.
Is user intervention required for the CVE-2015-2248 exploit to succeed?
Yes, user interaction is typically needed to exploit CVE-2015-2248 as it requires the user to be lured into clicking a malicious link.