NetSight
critical9.8

CVE-2022-22282

SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions incorrectly restricts access to a resource using HTTP connections from an unauthori…

Impact

SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions incorrectly restricts access to a resource using HTTP connections from an unauthorized actor leading to Improper Access Control vulnerability.

Affected products

VendorProductAffected versions
SonicwallSma 6200 Firmware
Versions 12.4.0, 12.4.1
SonicwallSma 6210 Firmware
Versions 12.4.0, 12.4.1
SonicwallSma 7200 Firmware
Versions 12.4.0, 12.4.1
SonicwallSma 7210 Firmware
Versions 12.4.0, 12.4.1
SonicwallSma 8000v Firmware
Versions 12.4.0, 12.4.1

Weakness classification

References