CVE-2015-2248: Cross-site request forgery (CSRF) vulnerability in the user portal in Dell SonicWALL Secure Remote Access (SRA) products with firmware before 7.5.1.0-38sv and…

PriorityP338medium6.8CVSS 2.0

AVNACMAuNCPIPAP

EXPLOIT

EPSS

3.96%

89.1th percentile

Cross-site request forgery (CSRF) vulnerability in the user portal in Dell SonicWALL Secure Remote Access (SRA) products with firmware before 7.5.1.0-38sv and 8.x before 8.0.0.1-16sv allows remote attackers to hijack the authentication of users for requests that create bookmarks via a crafted request to cgi-bin/editBookmark.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
sonicwall	remote_access_firmware	< 7.5.1.0-38sv	7.5.1.0-38sv
sonicwall	remote_access_firmware	>= 8.0.0.0 < 8.0.0.1-16sv	8.0.0.1-16sv

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.