CVE-2022-22274
Full vulnerability record from the local CVENow database.
Description
A Stack-based buffer overflow vulnerability in the SonicOS via HTTP request allows a remote unauthenticated attacker to cause Denial of Service (DoS) or potentially results in code execution in the firewall.
Severity
CRITICAL
CVSS score
9.8
(v3.1)
Vulnerability status
Modified
Source identifier
Published
2022-03-25 23:15:08.353000
Last modified
2026-11-09 14:43:41.437000
View original CVE JSON
{
"id": "CVE-2022-22274",
"sourceIdentifier": "[email protected]",
"published": "2022-03-25T23:15:08.353",
"lastModified": "2026-11-09T14:43:41.437",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A Stack-based buffer overflow vulnerability in the SonicOS via HTTP request allows a remote unauthenticated attacker to cause Denial of Service (DoS) or potentially results in code execution in the firewall."
},
{
"lang": "es",
"value": "Una vulnerabilidad de desbordamiento de búfer en la región Stack de la memoria en SonicOS por medio de una petición HTTP permite a un atacante remoto no autenticado causar una denegación de servicio (DoS) o potencialmente resultando en una ejecución de código en el firewall"
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "SonicWall",
"product": "SonicOS",
"versions": [
{
"version": "SonicOS 7.0.1-5050 and earlier",
"status": "affected"
},
{
"version": "SonicOS 7.0.1-R579 and earlier",
"status": "affected"
},
{
"version": "SonicOSv 6.5.4.4-44v-21-1452 and earlier",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
],
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"baseScore": 7.5,
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "NONE",
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"availabilityImpact": "PARTIAL"
},
"baseSeverity": "HIGH",
"exploitabilityScore": 10.0,
"impactScore": 6.4,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-121"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-787"
}
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*",
"versionEndIncluding": "7.0.1-5050",
"matchCriteriaId": "5348AB48-8B9B-4928-8B0C-D819D03D0FEC"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:a:sonicwall:nsv_270:-:*:*:*:*:*:*:*",
"matchCriteriaId": "50F3A318-F082-4BDD-80EA-51DB15D3458C"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:a:sonicwall:nsv_470:-:*:*:*:*:*:*:*",
"matchCriteriaId": "09CAD976-F02B-40D6-9584-B8146A5A2EA1"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:a:sonicwall:nsv_870:-:*:*:*:*:*:*:*",
"matchCriteriaId": "9079ED9F-0458-4EA8-8E89-5D3D4CA8096F"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:nsa_2700:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8D8B0C7A-FD65-47CA-A625-150A90EFA7A1"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:nsa_3700:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A69E000B-5806-46FD-A233-4E2CC9DD38D2"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:nsa_4700:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8DF4A322-7CC7-4AB9-B10E-FFF34DF2182D"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:nsa_5700:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4C15FED5-C48C-47CF-9645-0563D77883C1"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:nsa_6700:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A884B1BB-F201-4C77-9F6E-B8A884DCD4C2"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:nssp_10700:-:*:*:*:*:*:*:*",
"matchCriteriaId": "7C3BA5A3-1160-4793-A8D6-40B9D264BCC4"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:nssp_11700:-:*:*:*:*:*:*:*",
"matchCriteriaId": "6739DEA3-06FF-4FEB-9931-0DB27F63B70E"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:nssp_13700:-:*:*:*:*:*:*:*",
"matchCriteriaId": "0250EDF9-0AEF-4711-8EF6-D447CF48BCAF"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:tz270:-:*:*:*:*:*:*:*",
"matchCriteriaId": "70340DD4-687B-402C-85AF-C2B80D0F1600"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:tz270w:-:*:*:*:*:*:*:*",
"matchCriteriaId": "52847BA2-470B-4078-A79B-52095DB9214B"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:*",
"matchCriteriaId": "9853AE3A-B0EA-4249-AA7D-1F2051C9BF91"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4DBDD10C-F89D-4051-BC70-67B41167FF9B"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:*",
"matchCriteriaId": "6C23940E-2F9D-447B-A740-42035ED5D400"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:*",
"matchCriteriaId": "90C790AD-C40E-4527-8F83-D278282A9600"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:tz570:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C7DF76E0-8E3D-4E0D-A3BB-F5AE05A4C7C9"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:tz570p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "352DFCF9-E333-41C0-8033-91265768FD8E"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:tz570w:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4C882C38-9DA5-4C03-BB23-AB2B448E3307"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:tz670:-:*:*:*:*:*:*:*",
"matchCriteriaId": "AEEA6065-48D3-4EC7-BD94-CBAE3D1010FF"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*",
"versionEndIncluding": "7.0.1-r579",
"matchCriteriaId": "C8598D61-86DA-489E-A201-3816DDE140B9"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:nssp_15700:-:*:*:*:*:*:*:*",
"matchCriteriaId": "7D6CF3CF-256C-4C04-8BDF-B16398CD0459"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:sonicwall:sonicosv:*:*:*:*:*:*:*:*",
"versionEndIncluding": "6.5.4.4-44v-21-1452",
"matchCriteriaId": "6E83E089-AFB5-4959-895A-A7CA85570770"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:a:sonicwall:nsv_10:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E0F29408-6F1B-495A-B5A1-032579C9A796"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:a:sonicwall:nsv_100:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4075658A-827B-441E-91A0-CC9E24C898BB"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:a:sonicwall:nsv_1600:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4C720980-30BC-484B-96F9-E2ABF846ADF8"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:a:sonicwall:nsv_200:-:*:*:*:*:*:*:*",
"matchCriteriaId": "16455054-94EF-40DF-9A5B-A6EAD152D556"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:a:sonicwall:nsv_25:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F39027A2-CD71-4355-8FF3-4C2CD580B2C7"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:a:sonicwall:nsv_300:-:*:*:*:*:*:*:*",
"matchCriteriaId": "6F445BAB-D80A-4F2A-BDC8-4BE5175B542B"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:a:sonicwall:nsv_400:-:*:*:*:*:*:*:*",
"matchCriteriaId": "0FD1F4C9-D932-4D06-8FE7-BE69A855BD76"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:a:sonicwall:nsv_50:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B011DE32-D960-474F-BCCA-449E48228C5B"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:a:sonicwall:nsv_800:-:*:*:*:*:*:*:*",
"matchCriteriaId": "5E1BB409-C4E9-4014-B7BA-060FF00E2474"
}
]
}
]
}
],
"references": [
{
"url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0003",
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0003",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
}
]
}