CVE-2007-5815

CRITICAL 10.0CVE-2007-5815 · Published 05/11/2007 · updated 16/06/2026

In short

CVE-2007-5815 is a CRITICAL (CVSS 10.0) vulnerability affecting ssl vpn2000/4000 (sonicwall), ssl vpn 200 (sonicwall).
Chance of exploitation in the next 30 days (EPSS): 4.5%, higher than 91.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
ssl vpn2000/4000 sonicwall	`≤ 2.5`	No fix yet
ssl vpn 200 sonicwall	`≤ 2.1`	No fix yet

Description

Absolute path traversal vulnerability in the WebCacheCleaner ActiveX control 1.3.0.3 in SonicWall SSL-VPN 200 before 2.1, and SSL-VPN 2000/4000 before 2.5, allows remote attackers to delete arbitrary files via a full pathname in the argument to the FileDelete method.

References

secunia.com/advisories/27469 · Vendor Advisory
securityreason.com/securityalert/3342
sec-consult.com/303.html · Exploit
sec-consult.com/fileadmin/Advisories/20071101-0_sonicwall_multiple.txt
securityfocus.com/archive/1/483097/100/0/threaded
securityfocus.com/bid/26288 · Exploit
vupen.com/english/advisories/2007/3696
exchange.xforce.ibmcloud.com/vulnerabilities/38221

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free