CVE-2022-22274
critical · 9.8A Stack-based buffer overflow vulnerability in the SonicOS via HTTP request allows a remote unauthenticated attacker to cause Denial of Service (DoS) or potentially results in code execution in the firewall.
9.8
CVSS
75.5%
EPSS (exploit prob.)
99th
EPSS percentile
2022-03-25
Published
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-121CWE-787
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| sonicwall | sonicos | <= 7.0.1-5050 |
| sonicwall | nsa_2700 | all versions |
| sonicwall | nsa_3700 | all versions |
| sonicwall | nsa_4700 | all versions |
| sonicwall | nsa_5700 | all versions |
| sonicwall | nsa_6700 | all versions |
| sonicwall | nssp_10700 | all versions |
| sonicwall | nssp_11700 | all versions |
| sonicwall | nssp_13700 | all versions |
| sonicwall | nsv_270 | all versions |
| sonicwall | nsv_470 | all versions |
| sonicwall | nsv_870 | all versions |
| sonicwall | tz270 | all versions |
| sonicwall | tz270w | all versions |
| sonicwall | tz370 | all versions |
| sonicwall | tz370w | all versions |
| sonicwall | tz470 | all versions |
| sonicwall | tz470w | all versions |
| sonicwall | tz570 | all versions |
| sonicwall | tz570p | all versions |
| sonicwall | tz570w | all versions |
| sonicwall | tz670 | all versions |
| sonicwall | sonicos | <= 7.0.1-r579 |
| sonicwall | nssp_15700 | all versions |
| sonicwall | sonicosv | <= 6.5.4.4-44v-21-1452 |
| sonicwall | nsv_10 | all versions |
| sonicwall | nsv_100 | all versions |
| sonicwall | nsv_1600 | all versions |
| sonicwall | nsv_200 | all versions |
| sonicwall | nsv_25 | all versions |
| sonicwall | nsv_300 | all versions |
| sonicwall | nsv_400 | all versions |
| sonicwall | nsv_50 | all versions |
| sonicwall | nsv_800 | all versions |
Check a specific version with /api/v1/cve/match.
References
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2022-22274