Unrated severityNVD Advisory· Published Nov 5, 2007· Updated Apr 23, 2026

CVE-2007-5815

Description

Absolute path traversal vulnerability in the WebCacheCleaner ActiveX control 1.3.0.3 in SonicWall SSL-VPN 200 before 2.1, and SSL-VPN 2000/4000 before 2.5, allows remote attackers to delete arbitrary files via a full pathname in the argument to the FileDelete method.

Affected products

SonicWall/SSL VPN 200
cpe:2.3:a:sonicwall:ssl_vpn_200:*:*:*:*:*:*:*:*
Range: <=2.1
SonicWall/SSL Vpn2000\/4000
cpe:2.3:a:sonicwall:ssl_vpn2000\/4000:*:*:*:*:*:*:*:*
Range: <=2.5

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.sec-consult.com/303.htmlnvdExploit
www.securityfocus.com/bid/26288nvdExploit
secunia.com/advisories/27469nvdVendor Advisory
securityreason.com/securityalert/3342nvd
www.sec-consult.com/fileadmin/Advisories/20071101-0_sonicwall_multiple.txtnvd
www.securityfocus.com/archive/1/483097/100/0/threadednvd
www.vupen.com/english/advisories/2007/3696nvd
exchange.xforce.ibmcloud.com/vulnerabilities/38221nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.005
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000