Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-22275


Improper Restriction of TCP Communication Channel in HTTP/S inbound traffic from WAN to DMZ bypassing security policy until TCP handshake potentially resulting in Denial of Service (DoS) attack if a target host is vulnerable.


Published

2022-04-27T17:15:07.273

Last Modified

2024-11-21T06:46:32.393

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: PARTIAL
Exploitability Score

10.0

Impact Score

2.9

Weaknesses
  • Type: Secondary
    CWE-400
  • Type: Primary
    NVD-CWE-noinfo

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System sonicwall sonicos ≤ 7.0.1-5030-r2007 Yes
Hardware sonicwall nsa_2650 - No
Hardware sonicwall nsa_2700 - No
Hardware sonicwall nsa_3650 - No
Hardware sonicwall nsa_3700 - No
Hardware sonicwall nsa_4650 - No
Hardware sonicwall nsa_4700 - No
Hardware sonicwall nsa_5650 - No
Hardware sonicwall nsa_5700 - No
Hardware sonicwall nsa_6650 - No
Hardware sonicwall nsa_6700 - No
Hardware sonicwall nsa_9250 - No
Hardware sonicwall nsa_9450 - No
Hardware sonicwall nsa_9650 - No
Hardware sonicwall soho_250 - No
Hardware sonicwall soho_250w - No
Hardware sonicwall tz270 - No
Hardware sonicwall tz270w - No
Hardware sonicwall tz300 - No
Hardware sonicwall tz300p - No
Hardware sonicwall tz300w - No
Hardware sonicwall tz350 - No
Hardware sonicwall tz350w - No
Hardware sonicwall tz370 - No
Hardware sonicwall tz370w - No
Hardware sonicwall tz400 - No
Hardware sonicwall tz400w - No
Hardware sonicwall tz470 - No
Hardware sonicwall tz470w - No
Hardware sonicwall tz500 - No
Hardware sonicwall tz500w - No
Hardware sonicwall tz570 - No
Hardware sonicwall tz570p - No
Hardware sonicwall tz570w - No
Hardware sonicwall tz600 - No
Hardware sonicwall tz600p - No
Hardware sonicwall tz670 - No
Operating System sonicwall sonicos ≤ 7.0.1.0-5030-1391 Yes
Hardware sonicwall nsv_10 - No
Hardware sonicwall nsv_100 - No
Hardware sonicwall nsv_200 - No
Hardware sonicwall nsv_25 - No
Hardware sonicwall nsv_270 - No
Hardware sonicwall nsv_300 - No
Hardware sonicwall nsv_400 - No
Hardware sonicwall nsv_470 - No
Hardware sonicwall nsv_50 - No
Hardware sonicwall nsv_800 - No
Hardware sonicwall nsv_870 - No
Operating System sonicwall sonicos ≤ 7.0.1-5030-r780 Yes
Hardware sonicwall nssp_10700 - No
Hardware sonicwall nssp_11700 - No
Hardware sonicwall nssp_12400 - No
Hardware sonicwall nssp_12800 - No
Hardware sonicwall nssp_13700 - No

References