CVE-2015-2248

SonicWALL Remote Access Firmware < 7.5.1.0-38sv - Cross-Site Request Forgery via Bookmark Creation

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2015-2248. PoCs published by Veit Hailperin.

AI-analyzed exploit summary This exploit leverages a CSRF vulnerability in Dell SonicWALL SRA appliances to force a logged-in user to create a malicious bookmark, which then exfiltrates credentials to an attacker-controlled server. The PoC includes HTML forms for CSRF and a Metasploit listener setup for credential capture.

Description

Cross-site request forgery (CSRF) vulnerability in the user portal in Dell SonicWALL Secure Remote Access (SRA) products with firmware before 7.5.1.0-38sv and 8.x before 8.0.0.1-16sv allows remote attackers to hijack the authentication of users for requests that create bookmarks via a crafted request to cgi-bin/editBookmark.

Exploits (1)

exploitdb WORKING POC

by Veit Hailperin · textwebappscgi

https://www.exploit-db.com/exploits/36940

View Code ZIP pw:eip

This exploit leverages a CSRF vulnerability in Dell SonicWALL SRA appliances to force a logged-in user to create a malicious bookmark, which then exfiltrates credentials to an attacker-controlled server. The PoC includes HTML forms for CSRF and a Metasploit listener setup for credential capture.

Classification

Working Poc 95%

Attack Type

Auth Bypass

Complexity

Moderate

Reliability

Reliable

Target: Dell SonicWALL SRA 7.5 prior to 7.5.1.0-38sv and 8.0 prior to 8.0.0.1-16sv

Auth required

Prerequisites: Victim must be authenticated to the SonicWALL SRA appliance · Attacker must host a malicious server to capture credentials

MITRE ATT&CK