Remote Code Execution Vulnerability in SonicWall Switch by SonicWall
CVE-2022-2323

8.8HIGH

Key Information:

Vendor
Sonicwall
Status
Sonicwall Switch
Vendor
CVE Published:
29 July 2022

Summary

This vulnerability arises from improper handling of special elements in user inputs, enabling a malicious, authenticated user to execute arbitrary code on the host system. The flaw has been identified in SonicWall Switch version 1.1.1.0-2s and earlier, allowing for potential exploitation. Organizations utilizing these products should take immediate action to mitigate risks associated with this security flaw.

Affected Version(s)

SonicWall Switch 1.1.1.0-2s and earlier

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-202...
x_refsource_CONFIRM

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.