Not rated

CVE-2022-22282 SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions incorrectly restricts access to a resource…

Description

SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions incorrectly restricts access to a resource using HTTP connections from an unauthorized actor leading to Improper Access Control vulnerability.

Affected products and versions

Product	Affected versions	Fixed in
SonicWall SMA1000 12.4	12.4.0 → 12.4.1	No fix stated

The 4 CVEs of SonicWall SMA1000 →

CVE-2023-0126 Pre-authentication path traversal vulnerability in SMA1000 firmware version 12.4.2, which allows an unauthenticated… 7.5 High CVE-2022-1702 SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions accept a user-controlled input that… Not rated CVE-2022-1701 SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions uses a shared and hard-coded encryption… Not rated

Do you use SonicWall SMA1000?

Track this CVE Watch SonicWall SMA1000 Check my SBOMs

cveye.io/en/cve/CVE-2022-22282

Timeline

Published May 13, 2022
Last modified August 3, 2024

References

psirt.global.sonicwall.com psirt.global.sonicwall.com

Track this CVE

CVE-2022-22282 SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions incorrectly restricts access to a resource…

Description

Affected products and versions

Other CVEs of SonicWall SMA1000