Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2022-1702
HistoryMay 13, 2022 - 8:15 p.m.

CVE-2022-1702

2022-05-1320:15:07
CWE-601
[email protected]
web.nvd.nist.gov

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.001 Low

EPSS

Percentile

31.3%

JSON

SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions accept a user-controlled input that specifies a link to an external site and uses that link in a redirect which leads to Open redirection vulnerability.

Affected configurations

NVD
Node
sonicwallsma_6200_firmwareMatch12.4.0
OR
sonicwallsma_6200_firmwareMatch12.4.1
AND
sonicwallsma_6200Match-
Node
sonicwallsma_6210_firmwareMatch12.4.0
OR
sonicwallsma_6210_firmwareMatch12.4.1
AND
sonicwallsma_6210Match-
Node
sonicwallsma_7200_firmwareMatch12.4.0
OR
sonicwallsma_7200_firmwareMatch12.4.1
AND
sonicwallsma_7200Match-
Node
sonicwallsma_7210_firmwareMatch12.4.0
OR
sonicwallsma_7210_firmwareMatch12.4.1
AND
sonicwallsma_7210Match-
Node
sonicwallsma_8000v_firmwareMatch12.4.0
OR
sonicwallsma_8000v_firmwareMatch12.4.1
AND
sonicwallsma_8000vMatch-

Related

cvelist 1
cve 1
prion 1
thn 1
nessus 1
cvelist
cvelist
CVE-2022-1702
2022-05-13 19:40:15
cve
cve
CVE-2022-1702
2022-05-13 20:15:07
prion
prion
Open redirect
2022-05-13 20:15:00
thn
thn
SonicWall Releases Patches for New Flaws Affecting SSLVPN SMA1000 Devices
2022-05-14 05:39:00
nessus
nessus
SonicWall Secure Mobile Access (SMA) 12.4.x < 12.4.1-02994 Multiple Vulnerabilities (SNWLID-2022-0009)
2022-06-08 00:00:00

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.001 Low

EPSS

Percentile

31.3%

JSON
Related for NVD:CVE-2022-1702
cvelist1cve1prion1thn1nessus1