Remote code execution

Improper neutralization of special elements used in a user input allows an authenticated malicious user to perform remote code execution in the host system. This vulnerability impacts SonicWall Switch 1.1.1.0-2s and earlier versions...

CVE-2022-2323

Improper neutralization of special elements used in a user input allows an authenticated malicious user to perform remote code execution in the host system. This vulnerability impacts SonicWall Switch 1.1.1.0-2s and earlier versions...

CVE-2022-2323

CVE-2022-2323 affects SonicWall Switch versions 1.1.1.0-2s and earlier. The root cause is improper neutralization of special elements in user input, leading to remote code execution on the host when exploited by an authenticated attacker. The Post-Authenticated RCE is described in SonicWall PSIRT...

PT-2022-15915 · Sonicwall · Sonicwall Hosted Email Security

Name of the Vulnerable Software and Affected Versions: SonicWall Hosted Email Security versions prior to 10.0.17.7319 Description: The issue is related to an improperly implemented security check in the SonicWall Hosted Email Security, which allows for the bypass of the Capture ATP security servi...

PT-2022-15909 · Sonicwall · Sonicwall Switch

Name of the Vulnerable Software and Affected Versions: SonicWall Switch versions 1.1.1.0-2s and earlier Description: The issue allows an authenticated malicious user to perform remote code execution in the host system due to improper neutralization of special elements used in a user input...

The vulnerability of the SonicWall Analytics On-Prem global network firewall management system’s analytical service allows attackers to execute arbitrary SQL commands in the application database by failing to protect the SQL query structure.

The vulnerability of the SonicWall Analytics On-Prem global network management system’s analytical service is related to the failure to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands in the application database remotely...

SonicWall urges customers to patch critical SQL injection bug ASAP

Cybersecurity hardware company, SonicWall, recently released a public security notice about a critical SQL injection flaw affecting its GMS Global Management System and Analytics On-Prem products. The flaw, which is tracked as CVE-2022-22280, is given a 9.4 critical rating. With the high capabili...

SonicWall Issues Patch for Critical Bug Affecting its Analytics and GMS Products

Network security company SonicWall on Friday rolled out fixes to mitigate a critical SQL injection SQLi vulnerability affecting its Analytics On-Prem and Global Management System GMS products. The vulnerability, tracked as CVE-2022-22280, is rated 9.4 for severity on the CVSS scoring system and...

SonicWALL Analytics On-Prem SQL注入漏洞

SonicWALL Analytics is a high-performance management and reporting engine for the Web from SonicWALL, Inc. A SQL injection vulnerability exists in SonicWALL Analytics On-Prem 2.5.0.3-2520 and prior versions, which stems from incorrect neutralization of special elements used in SQL commands...

Vulnerability fixed in SonicWall GMS and Analytics

A vulnerability has been fixed in SonicWall GMS and Analytics. The vulnerability allows an unauthenticated remote malicious person able to perform an SQL injection attack under the privileges of the application. To exploit the vulnerability, the malicious party must have access to the management...

Unauthenticated SQL Injection in SonicWall GMS and Analytics

Improper Neutralization of Special Elements used in an SQL Command leading to Unauthenticated SQL Injection vulnerability, impacting SonicWall GMS and Analytics On-Prem. CVE: CVE-2022-22280 Last updated: Oct. 13, 2022, 7:30 p.m...

PT-2022-3851 · Sonicwall · Sonicwall Analytics On-Prem +1

Name of the Vulnerable Software and Affected Versions: SonicWall GMS versions 9.3.1-SP2-Hotfix1 and earlier SonicWall Analytics On-Prem versions 2.5.0.3-2520 and earlier Description: The issue is related to the improper neutralization of special elements used in an SQL command, leading to an...

SonicWALL Switch 命令注入漏洞

SonicWALL Switch is a switch from SonicWALL, Inc. An input validation error vulnerability exists in SonicWALL Switch versions prior to 1.2.0.0-3, which stems from insufficient validation of user-supplied input and can be exploited by a remote attacker to execute arbitrary code on the device...

SonicWall Switch Post-Authenticated Remote Code Execution

A vulnerability in SonicWall Switch 1.1.1.0-2s and earlier allows an authenticated malicious user to perform remote code execution in the host system. CVE: CVE-2022-2323 Last updated: July 15, 2022, 4:11 p.m...

SonicWALL Hosted Email Security 安全特征问题漏洞

SonicWALL Hosted Email Security is an advanced cloud email security service from SonicWALL, Inc. A security feature issue vulnerability exists in SonicWall Hosted Email Security HES version 10.0.17.7319 and prior versions that stems from the incorrect implementation of certain security features i...

SonicWall Hosted Email Security Capture ATP Bypass

Improperly Implemented Security Check vulnerability in the SonicWall Hosted Email Security leads to bypass of Capture ATP security service in the appliance. CVE: CVE-2022-2324 Last updated: July 14, 2022, 6:43 p.m...

OpenSSL c_rehash script allows command injection CVE-2022-1292

A critical vulnerability CVE-2022-1292 was found in OpenSSL crehash script. This is due to shell metacharacters not being properly sanitized, resulting in command injection. An attacker could execute arbitrary commands with the privileges of the script.After review, it has been determined that...

SonicWall SMA100 Multiple Vulnerabilities (CVE-2019-7484; CVE-2019-7485)

Multiple vulnerabilities exist in SonicWall SMA100. Successful exploitation of these vulnerabilities would allow a remote attacker to execute arbitrary commands on the affected system...

The vulnerability of SonicWall SMA 1000 network firewall software lies in the redirection of URLs to unreliable websites, allowing attackers to redirect users to arbitrary URL addresses.

The vulnerability of SonicWall SMA 1000 network firewall microprogramming software relates to the redirection of URLs to unreliable websites. Exploiting this vulnerability allows a malicious actor to redirect users to any given URL address using a specially created link...

The vulnerability of SonicWall SMA 1000 series network firewall microprogramming software, which is related to the use of a strictly encrypted cryptographic key, allows attackers to disclose protected information.

The vulnerability of SonicWall SMA 1000 series network firewall microprogramming software is related to the use of a strictly encrypted cryptographic key. Exploiting this vulnerability can allow attackers to disclose protected information...