CVE-2022-22273

🗓️ 17 Mar 2022 01:40:09Reported by sonicwallType

Improper neutralization of Special Elements leading to OS Command Injection vulnerability in SRA and older SMA 100 series firmwar

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2022-22273	17 Mar 202202:15	–	attackerkb
CNNVD	SonicWall SSLVPN 操作系统命令注入漏洞	17 Mar 202200:00	–	cnnvd
Cvelist	CVE-2022-22273	17 Mar 202201:40	–	cvelist
NVD	CVE-2022-22273	17 Mar 202202:15	–	nvd
Prion	Command injection	17 Mar 202202:15	–	prion
Positive Technologies	PT-2022-15319 · Unknown +1 · Sma 100 Series +1	17 Mar 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-22273	23 May 202500:48	–	redhatcve
SonicWall	Post-Auth OS Command Injection vulnerability Impacting End-Of-Life SRA Appliances and End-Of-Support SMA100 firmware versions	12 Mar 202202:48	–	sonicwall
Vulnrichment	CVE-2022-22273	17 Mar 202201:40	–	vulnrichment

NVD

Vulners

Vulnrichment

Node

sonicwall sma_200_firmwareRange≤9.0.0.9-26sv

AND

sonicwall sma_200Match-

Node

sonicwall sma_210_firmwareRange≤9.0.0.9-26sv

AND

sonicwall sma_210Match-

Node

sonicwall sma_400_firmwareRange≤9.0.0.9-26sv

AND

sonicwall sma_400Match-

Node

sonicwall sma_410_firmwareRange≤9.0.0.9-26sv

AND

sonicwall sma_410Match-

Node

sonicwall sma_500v_firmwareRange≤9.0.0.9-26sv

AND

sonicwall sma_500vMatch-

Node

sonicwall sra_4200_firmwareRange≤9.0.0.5-19sv

AND

sonicwall sra_4200Match-

Node

sonicwall sra_4600_firmwareRange≤9.0.0.5-19sv

AND

sonicwall sra_4600Match-

Node

sonicwall sra_1600_firmwareRange≤9.0.0.5-19sv

AND

sonicwall sra_1600Match-

Node

sonicwall sra_1200_firmwareRange≤9.0.0.5-19sv

AND

sonicwall sra_1200Match-

[
  {
    "product": "SonicWall SRA/SMA100",
    "vendor": "SonicWall",
    "versions": [
      {
        "status": "affected",
        "version": "SRA Series 9.0.0.5-19sv and earlier versions."
      },
      {
        "status": "affected",
        "version": "SMA100 Series 9.0.0.9-26sv and earlier versions."
      }
    ]
  }
]

Source	Link
psirt	www.psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0001

21 Nov 2024 06:46Current

9.6High risk

Vulners AI Score9.6

CVSS 27.5

CVSS 3.19.8

EPSS0.00864

SSVC

CWE-78