CVE-2022-22282

Published on: Not Yet Published

Last Modified on: 05/13/2022 09:07:00 PM UTC

CVE-2022-22282

Certain versions of SonicWall SMA1000 from SonicWall contain the following vulnerability:

SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions incorrectly restricts access to a resource using HTTP connections from an unauthorized actor leading to Improper Access Control vulnerability.

CVE-2022-22282 has been assigned by [email protected] to track the vulnerability
Affected Vendor/Software: SonicWall - SonicWall SMA1000 version 12.4.0
Affected Vendor/Software: SonicWall - SonicWall SMA1000 version 12.4.1

CVE References

Description	Tags ^ⓘ	Link
Security Advisory	psirt.global.sonicwall.com text/html	CONFIRM psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0009

By selecting these links, you may be leaving CVEreport webspace. We have provided these links to other websites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other websites that are more appropriate for your purpose. CVEreport does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, CVEreport does not endorse any commercial products that may be mentioned on these sites. Please address comments about any linked pages to [email protected].

There are currently no QIDs associated with this CVE

Known Affected Software

Vendor	Product	Version
SonicWall	SonicWall_SMA1000	12.4.0
SonicWall	SonicWall_SMA1000	12.4.1

No vendor comments have been submitted for this CVE

Social Mentions

Source	Title	Posted (UTC)
@Cronup_CyberSec	? Alerta por vulnerabilidad Alta CVE-2022-22282, SSLVPN SMA 1000 ByPass SonicWall. Más información en nuestro blog… twitter.com/i/web/status/1…	2022-05-13 17:31:26
@CVEreport	CVE-2022-22282 : SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions incorrectly restricts… twitter.com/i/web/status/1…	2022-05-13 19:48:11
@Robo_Alerts	Potentially Critical CVE Detected! CVE-2022-22282 SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlie… twitter.com/i/web/status/1…	2022-05-13 20:56:01
/r/netcve	CVE-2022-22282	2022-05-13 20:38:18
/r/k12cybersecurity	MS-ISAC CYBERSECURITY ADVISORY - Multiple Vulnerabilities in SonicWall SSLVPN SMA1000 Series Could Allow for Authentication Bypass - PATCH: NOW	2022-05-16 12:54:37
/r/u/CyberHoot	Security Advisory: SonicWall Authentication Vulnerability	2022-05-16 14:25:42