Riskcovery

CVE-2022-22273

State
Published
Severity
Not scored
Published
Mar 17, 2022
Updated
Aug 3, 2024
Reserved
Dec 29, 2021

Read the record on cve.org

Description

Improper neutralization of Special Elements leading to OS Command Injection vulnerability impacting end-of-life Secure Remote Access (SRA) products and older firmware versions of Secure Mobile Access (SMA) 100 series products, specifically the SRA appliances running all 8.x, 9.0.0.5-19sv and earlier versions and Secure Mobile Access (SMA) 100 series products running older firmware 9.0.0.9-26sv and earlier versions

Scores

The record has no CVSS score.

Weaknesses

  • CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Affected Products

ProductVersions
SonicWall SRA/SMA100SonicWall
  • SRA Series 9.0.0.5-19sv and earlier versions.Affected
  • SMA100 Series 9.0.0.9-26sv and earlier versions.Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.