Lucene search
HistoryJul 29, 2022 - 9:15 p.m.
CVE-2022-2324
sonicwall
hosted email security
capture atp
bypass
vulnerability
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS
0.001
Percentile
31.1%
Improperly Implemented Security Check vulnerability in the SonicWall Hosted Email Security leads to bypass of Capture ATP security service in the appliance. This vulnerability impacts 10.0.17.7319 and earlier versions
Affected configurations
Node
sonicwallemail_securityRange≤10.0.17.7319
| Vendor | Product | Version | CPE |
|---|---|---|---|
| sonicwall | email_security | * | cpe:2.3:a:sonicwall:email_security:*:*:*:*:*:*:*:* |
Related
prion
prion
Security feature bypass
2022-07-29 21:15:00
cvelist
cvelist
CVE-2022-2324
2022-07-29 21:05:26
cve
cve
CVE-2022-2324
2022-07-29 21:15:09
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS
0.001
Percentile
31.1%
Related for NVD:CVE-2022-2324