Lucene search

[email protected]CVE-2022-2323

HistoryJul 29, 2022 - 8:15 p.m.

CVE-2022-2323

2022-07-2920:15:13

CWE-77

[email protected]

web.nvd.nist.gov

cve-2022-2323

sonicwall switch

remote code execution

security vulnerability

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.9%

JSON

Improper neutralization of special elements used in a user input allows an authenticated malicious user to perform remote code execution in the host system. This vulnerability impacts SonicWall Switch 1.1.1.0-2s and earlier versions

Affected configurations

NVD

Node

sonicwallsws12-10fpoeMatch-

AND

sonicwallsws12-10fpoe_firmwareRange<1.2.0.0-3

Node

sonicwallsws12-8Match-

AND

sonicwallsws12-8_firmwareRange<1.2.0.0-3

Node

sonicwallsws12-8poeMatch-

AND

sonicwallsws12-8poe_firmwareRange<1.2.0.0-3

Node

sonicwallsws14-24Match-

AND

sonicwallsws14-24_firmwareRange<1.2.0.0-3

Node

sonicwallsws14-24fpoeMatch-

AND

sonicwallsws14-24fpoe_firmwareRange<1.2.0.0-3

Node

sonicwallsws14-48Match-

AND

sonicwallsws14-48_firmwareRange<1.2.0.0-3

Node

sonicwallsws14-48fpoeMatch-

AND

sonicwallsws14-48fpoe_firmwareRange<1.2.0.0-3

CPENameOperatorVersion
sonicwall:sws12-10fpoe_firmwaresonicwall sws12-10fpoe firmwarelt1.2.0.0-3

CPE	Name	Operator	Version
sonicwall:sws12-10fpoe_firmware	sonicwall sws12-10fpoe firmware	lt	1.2.0.0-3

CNA Affected

[
  {
    "product": "SonicWall Switch",
    "vendor": "SonicWall",
    "versions": [
      {
        "status": "affected",
        "version": "1.1.1.0-2s and earlier"
      }
    ]
  }
]

References

psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0013

Social References

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.9%

JSON

Related for CVE-2022-2323

cvelist1 prion1 nvd1