CVE-2022-22274

🗓️ 25 Mar 2022 23:05:09Reported by sonicwallType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 270 Views

A Stack-based buffer overflow vulnerability in SonicOS via HTTP request allows remote unauthenticated attacker to cause DoS or code execution

Reporter	Title	Published	Views	Family All 21
GithubExploit	Exploit for Out-of-bounds Write in Sonicwall Sonicos	14 Jan 202317:15	–	githubexploit
GithubExploit	Exploit for Stack-based Buffer Overflow in Sonicwall Sonicos	12 Jan 202420:03	–	githubexploit
GithubExploit	Exploit for Out-of-bounds Write in Sonicwall Sonicos	14 Jan 202317:15	–	githubexploit
ATTACKERKB	CVE-2022-22274	25 Mar 202223:15	–	attackerkb
Circl	CVE-2022-22274	29 Mar 202211:35	–	circl
CNNVD	SonicOS 缓冲区错误漏洞	25 Mar 202200:00	–	cnnvd
Cvelist	CVE-2022-22274	25 Mar 202223:05	–	cvelist
Hive Pro Threat Advisories	Weekly Threat Digest: 28 March – 3 April 2022	5 Apr 202210:11	–	hivepro
Hive Pro Threat Advisories	DOS Vulnerability discovered in SonicWall Next-Generation Firewall	30 Mar 202213:10	–	hivepro
NCSC	Vulnerability fixed in SonicOS	25 Mar 202200:00	–	ncsc

NVD

Vulners

Node

sonicwall sonicosRange≤7.0.1-5050

AND

sonicwall nsa_2700Match-

sonicwall nsa_3700Match-

sonicwall nsa_4700Match-

sonicwall nsa_5700Match-

sonicwall nsa_6700Match-

sonicwall nssp_10700Match-

sonicwall nssp_11700Match-

sonicwall nssp_13700Match-

sonicwall nsv_270Match-

sonicwall nsv_470Match-

sonicwall nsv_870Match-

sonicwall tz270Match-

sonicwall tz270wMatch-

sonicwall tz370Match-

sonicwall tz370wMatch-

sonicwall tz470Match-

sonicwall tz470wMatch-

sonicwall tz570Match-

sonicwall tz570pMatch-

sonicwall tz570wMatch-

sonicwall tz670Match-

Node

sonicwall sonicosRange≤7.0.1-r579

AND

sonicwall nssp_15700Match-

Node

sonicwall sonicosvRange≤6.5.4.4-44v-21-1452

AND

sonicwall nsv_10Match-

sonicwall nsv_100Match-

sonicwall nsv_1600Match-

sonicwall nsv_200Match-

sonicwall nsv_25Match-

sonicwall nsv_300Match-

sonicwall nsv_400Match-

sonicwall nsv_50Match-

sonicwall nsv_800Match-

[
  {
    "product": "SonicOS",
    "vendor": "SonicWall",
    "versions": [
      {
        "status": "affected",
        "version": "SonicOS 7.0.1-5050 and earlier"
      },
      {
        "status": "affected",
        "version": "SonicOS 7.0.1-R579 and earlier"
      },
      {
        "status": "affected",
        "version": "SonicOSv 6.5.4.4-44v-21-1452 and earlier"
      }
    ]
  }
]

Source	Link
psirt	www.psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0003

21 Nov 2024 06:46Current

9.8High risk

Vulners AI Score9.8

CVSS 27.5

CVSS 3.19.8

EPSS0.46998

cve-2022-22274 sonicos http request buffer overflow denial of service code execution nvd