CVE-2022-1703
high · 8.8Improper neutralization of special elements in the SonicWall SSL-VPN SMA100 series management interface allows a remote authenticated attacker to inject OS Commands which potentially leads to remote command execution vulnerability or denial of service (DoS) attack.
8.8
CVSS
12.3%
EPSS (exploit prob.)
96th
EPSS percentile
2022-06-08
Published
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-78
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| sonicwall | sma_210_firmware | <= 10.2.1.4-31sv |
| sonicwall | sma_210 | all versions |
| sonicwall | sma_410_firmware | <= 10.2.1.4-31sv |
| sonicwall | sma_410 | all versions |
| sonicwall | sma_500v_firmware | <= 10.2.1.4-31sv |
| sonicwall | sma_500v | all versions |
| sonicwall | sma_210_firmware | <= 10.2.0.9-41sv |
| sonicwall | sma_210 | all versions |
| sonicwall | sma_410_firmware | <= 10.2.0.9-41sv |
| sonicwall | sma_410 | all versions |
| sonicwall | sma_500v_firmware | <= 10.2.0.9-41sv |
| sonicwall | sma_500v | all versions |
Check a specific version with /api/v1/cve/match.
References
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2022-1703