SonicWall SonicOS
At a glance
- Source
- NVD
- EPSS
- EPSS 0.79 % · percentile 56 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- sonicwall
- NVD status
- Modified
Description
A vulnerability in SonicOS SNMP service resulting exposure of Wireless Access Point sensitive information in cleartext.
Weaknesses (CWE)
- CWE-200 — Exposure of Sensitive Information to an Unauthorized Actor
References
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 5.3 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N | NVD · nvd@nist.gov (Primary) |
| CVSS 2.0 | MEDIUM 5.0 | AV:N/AC:L/Au:N/C:P/I:N/A:N | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2022-27424
- GCVE · GCVE-0-2022-22277
CERT-FR advisories
- CERTFR-2022-AVI-396 — Multiples vulnérabilités dans les produits SonicWall · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:o:sonicwall:tz300p_firmware:*:*:*:*:*:*:*:*< 6.5.4.10cpe:2.3:o:sonicwall:tz300p_firmware:7.0.0:*:*:*:*:*:*:*cpe:2.3:o:sonicwall:tz300w_firmware:*:*:*:*:*:*:*:*< 6.5.4.10cpe:2.3:o:sonicwall:tz300w_firmware:7.0.0:*:*:*:*:*:*:*cpe:2.3:o:sonicwall:tz350_firmware:*:*:*:*:*:*:*:*< 6.5.4.10cpe:2.3:o:sonicwall:tz350_firmware:7.0.0:*:*:*:*:*:*:*cpe:2.3:o:sonicwall:tz350w_firmware:*:*:*:*:*:*:*:*< 6.5.4.10cpe:2.3:o:sonicwall:tz350w_firmware:7.0.0:*:*:*:*:*:*:*cpe:2.3:o:sonicwall:nssp_10700_firmware:*:*:*:*:*:*:*:*< 7.0.1.0cpe:2.3:o:sonicwall:nssp_11700_firmware:*:*:*:*:*:*:*:*< 7.0.1.0cpe:2.3:o:sonicwall:nssp_12400_firmware:*:*:*:*:*:*:*:*< 7.0.1.0cpe:2.3:o:sonicwall:nssp_12800_firmware:*:*:*:*:*:*:*:*< 7.0.1.0cpe:2.3:o:sonicwall:nssp_13700_firmware:*:*:*:*:*:*:*:*< 7.0.1.0cpe:2.3:o:sonicwall:nssp_15700_firmware:*:*:*:*:*:*:*:*< 7.0.1.0cpe:2.3:o:sonicwall:tz370_firmware:*:*:*:*:*:*:*:*< 6.5.4.10cpe:2.3:o:sonicwall:tz370_firmware:7.0.0:*:*:*:*:*:*:*cpe:2.3:o:sonicwall:tz370w_firmware:*:*:*:*:*:*:*:*< 6.5.4.10cpe:2.3:o:sonicwall:tz370w_firmware:7.0.0:*:*:*:*:*:*:*cpe:2.3:o:sonicwall:tz400_firmware:*:*:*:*:*:*:*:*< 6.5.4.10cpe:2.3:o:sonicwall:tz400_firmware:7.0.0:*:*:*:*:*:*:*cpe:2.3:o:sonicwall:nsv_10_firmware:*:*:*:*:*:*:*:*< 7.0.1.0cpe:2.3:o:sonicwall:nsv_100_firmware:*:*:*:*:*:*:*:*< 7.0.1.0cpe:2.3:o:sonicwall:nsv_1600_firmware:*:*:*:*:*:*:*:*< 7.0.1.0cpe:2.3:o:sonicwall:nsv_200_firmware:*:*:*:*:*:*:*:*< 7.0.1.0cpe:2.3:o:sonicwall:nsv_25_firmware:*:*:*:*:*:*:*:*< 7.0.1.0cpe:2.3:o:sonicwall:nsv_270_firmware:*:*:*:*:*:*:*:*< 7.0.1.0cpe:2.3:o:sonicwall:nsv_300_firmware:*:*:*:*:*:*:*:*< 7.0.1.0cpe:2.3:o:sonicwall:nsv_400_firmware:*:*:*:*:*:*:*:*< 7.0.1.0cpe:2.3:o:sonicwall:nsv_470_firmware:*:*:*:*:*:*:*:*< 7.0.1.0cpe:2.3:o:sonicwall:nsv_50_firmware:*:*:*:*:*:*:*:*< 7.0.1.0cpe:2.3:o:sonicwall:nsv_800_firmware:*:*:*:*:*:*:*:*< 7.0.1.0cpe:2.3:o:sonicwall:nsv_870_firmware:*:*:*:*:*:*:*:*< 7.0.1.0cpe:2.3:o:sonicwall:tz400w_firmware:*:*:*:*:*:*:*:*< 6.5.4.10cpe:2.3:o:sonicwall:tz400w_firmware:7.0.0:*:*:*:*:*:*:*cpe:2.3:o:sonicwall:tz470_firmware:*:*:*:*:*:*:*:*< 6.5.4.10cpe:2.3:o:sonicwall:tz470_firmware:7.0.0:*:*:*:*:*:*:*cpe:2.3:o:sonicwall:tz470w_firmware:*:*:*:*:*:*:*:*< 6.5.4.10cpe:2.3:o:sonicwall:tz470w_firmware:7.0.0:*:*:*:*:*:*:*cpe:2.3:o:sonicwall:tz500_firmware:*:*:*:*:*:*:*:*< 6.5.4.10cpe:2.3:o:sonicwall:tz500_firmware:7.0.0:*:*:*:*:*:*:*- +40 more
Affected products
| Product | Versions |
|---|---|
| SonicWall · SonicOS | affected SonicOS Gen 7 TZ-Series 7.0.1-5030-R2007 and earlier versions. ; affected SonicOS Gen 7 NSa-Series 7.0.1-5030-R2007 and earlier versions. ; affected SonicOS Gen 7 NSv-Series 7.0.1.0-5030-1391 and earlier versions. ; affected SonicOS Gen 7 NSsp-Series 7.0.1-5030-R780 and earlier versions. ; affected SonicOS Gen 6 6.5.4.9-93n and earlier versions. |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |