CVE-2022-22282

SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions incorrectly restricts access to a resource using HTTP connections from an unauthorized actor leading to Improper Access Control vulnerability.

Score

CVSS 3.1 9.8 Critical

Status

Modified - PSIRT@sonicwall.com

Published

2022-05-13

Last modified

2024-08-03

Weaknesses

CWE-284

Affected products

• Sma 6200 Firmware (Sonicwall)
• Sma 6210 Firmware (Sonicwall)
• Sma 7200 Firmware (Sonicwall)
• Sma 7210 Firmware (Sonicwall)
• Sma 8000v Firmware (Sonicwall)
• Sonicwall Sma1000 (Sonicwall)

References

• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0009