CVE-2022-22278

7.5HIGH

Key Information

Vendor
Sonicwall
Status
Sonicos
Vendor
CVE Published:
27 April 2022

Summary

A vulnerability in SonicOS CFS (Content filtering service) returns a large 403 forbidden HTTP response message to the source address when users try to access prohibited resource this allows an attacker to cause HTTP Denial of Service (DoS) attack

Affected Version(s)

SonicOS = SonicOS Gen 7 TZ-Series 7.0.1-5030-R2007 and earlier versions.

SonicOS = SonicOS Gen 7 NSa-Series 7.0.1-5030-R2007 and earlier versions.

SonicOS = SonicOS Gen 7 NSv-Series 7.0.1.0-5030-1391 and earlier versions.

Refferences

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-202...
x_refsource_CONFIRM

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.