Remote Command Execution and DoS Vulnerability in SonicWall SSL-VPN Management Interface
CVE-2022-1703

8.8HIGH

Key Information:

Vendor
Sonicwall
Status
Sma100
Vendor
CVE Published:
3 June 2022

Summary

The SonicWall SSL-VPN SMA100 series is affected by a vulnerability allowing remote authenticated attackers to manipulate commands via the management interface. This improper neutralization of special elements can lead to execution of arbitrary OS commands and potentially allow attackers to disrupt services through denial of service (DoS) attacks. Organizations using the affected series must implement security patches and follow recommended practices to mitigate the risks associated with this vulnerability.

Affected Version(s)

SMA100 10.2.1.4-31sv and earlier

SMA100 10.2.0.9-41sv and earlier

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-202...
x_refsource_CONFIRM

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.