NetSight
high8.8

CVE-2022-1703

Improper neutralization of special elements in the SonicWall SSL-VPN SMA100 series management interface allows a remote authenticated attacker to inject OS Com…

Impact

Improper neutralization of special elements in the SonicWall SSL-VPN SMA100 series management interface allows a remote authenticated attacker to inject OS Commands which potentially leads to remote command execution vulnerability or denial of service (DoS) attack.

Affected products

VendorProductAffected versions
SonicwallSma 210 Firmware
through 10.2.1.4-31sv
through 10.2.0.9-41sv
SonicwallSma 410 Firmware
through 10.2.1.4-31sv
through 10.2.0.9-41sv
SonicwallSma 500v Firmware
through 10.2.1.4-31sv
through 10.2.0.9-41sv

Weakness classification

References