Lucene search

[email protected]CVE-2022-22278

HistoryApr 27, 2022 - 5:15 p.m.

CVE-2022-22278

2022-04-2717:15:00

CWE-770

[email protected]

web.nvd.nist.gov

sonicos

cfs

vulnerability

http

dos

attack

nvd

cve-2022-22278

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

38.2%

JSON

A vulnerability in SonicOS CFS (Content filtering service) returns a large 403 forbidden HTTP response message to the source address when users try to access prohibited resource this allows an attacker to cause HTTP Denial of Service (DoS) attack

CPENameOperatorVersion
sonicwall:tz300p_firmwaresonicwall tz300p firmwarelt7.0.1
sonicwall:tz300w_firmwaresonicwall tz300w firmwarelt7.0.1
sonicwall:tz350_firmwaresonicwall tz350 firmwarelt7.0.1
sonicwall:tz350w_firmwaresonicwall tz350w firmwarelt7.0.1
sonicwall:nssp_10700_firmwaresonicwall nssp 10700 firmwarelt7.0.1.0
sonicwall:nssp_11700_firmwaresonicwall nssp 11700 firmwarelt7.0.1.0
sonicwall:nssp_12400_firmwaresonicwall nssp 12400 firmwarelt7.0.1.0
sonicwall:nssp_12800_firmwaresonicwall nssp 12800 firmwarelt7.0.1.0
sonicwall:nssp_13700_firmwaresonicwall nssp 13700 firmwarelt7.0.1.0
sonicwall:nssp_15700_firmwaresonicwall nssp 15700 firmwarelt7.0.1.0

CPE	Name	Operator	Version
sonicwall:tz300p_firmware	sonicwall tz300p firmware	lt	7.0.1
sonicwall:tz300w_firmware	sonicwall tz300w firmware	lt	7.0.1
sonicwall:tz350_firmware	sonicwall tz350 firmware	lt	7.0.1
sonicwall:tz350w_firmware	sonicwall tz350w firmware	lt	7.0.1
sonicwall:nssp_10700_firmware	sonicwall nssp 10700 firmware	lt	7.0.1.0
sonicwall:nssp_11700_firmware	sonicwall nssp 11700 firmware	lt	7.0.1.0
sonicwall:nssp_12400_firmware	sonicwall nssp 12400 firmware	lt	7.0.1.0
sonicwall:nssp_12800_firmware	sonicwall nssp 12800 firmware	lt	7.0.1.0
sonicwall:nssp_13700_firmware	sonicwall nssp 13700 firmware	lt	7.0.1.0
sonicwall:nssp_15700_firmware	sonicwall nssp 15700 firmware	lt	7.0.1.0

Rows per page:

1-10 of 491

References

psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0004

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

38.2%

JSON

Related for CVE-2022-22278

cvelist1 prion1