CVE-2022-22279

🗓️ 13 Apr 2022 05:35:09Reported by sonicwallType

CVE-2022-22279: Post-authentication file read vulnerability in EOL SRA & older SMA firmwar

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2022-22279	13 Apr 202206:15	–	attackerkb
CNNVD	SonicWall SSLVPN 路径遍历漏洞	13 Apr 202200:00	–	cnnvd
Cvelist	CVE-2022-22279	13 Apr 202205:35	–	cvelist
NVD	CVE-2022-22279	13 Apr 202206:15	–	nvd
Prion	Design/Logic Flaw	13 Apr 202206:15	–	prion
Positive Technologies	PT-2022-15324 · Sonicwall · Secure Mobile Access (Sma) 100 +1	13 Apr 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-22279	23 May 202500:41	–	redhatcve
SonicWall	Post-Auth Arbitrary File Read vulnerability Impacting End-Of-Life SRA Appliances and End-Of-Support SMA100 firmware versions	13 Apr 202200:15	–	sonicwall
VulnCheck KEV	VulnCheck KEV: CVE-2022-22279	15 May 202300:00	–	vulncheck_kev

NVD

Vulners

Node

sonicwall sra_1200_firmwareRange≤9.0.0.5-19sv

AND

sonicwall sra_1200Match-

Node

sonicwall sra_4200_firmwareRange≤9.0.0.5-19sv

AND

sonicwall sra_4200Match-

Node

sonicwall sma_210_firmwareRange<9.0.0.10-28sv

AND

sonicwall sma_210Match-

Node

sonicwall sma_410_firmwareRange<9.0.0.10-28sv

AND

sonicwall sma_410Match-

Node

sonicwall sma_500v_firmwareRange<9.0.0.10-28sv

AND

sonicwall sma_500vMatch-

[
  {
    "product": "SonicWall SRA/SMA100",
    "vendor": "SonicWall",
    "versions": [
      {
        "status": "affected",
        "version": "SRA Series 9.0.0.5-19sv and earlier versions."
      },
      {
        "status": "affected",
        "version": "SMA100 Series 9.0.0.9-26sv and earlier versions."
      }
    ]
  }
]

Source	Link
psirt	www.psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0006

21 Nov 2024 06:46Current

5.3Medium risk

Vulners AI Score5.3

CVSS 24

CVSS 3.14.9

EPSS0.00545