SonicWall SonicWall Email Security
At a glance
- Source
- NVD
- EPSS
- EPSS 0.64 % · percentile 50 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- sonicwall
- NVD status
- Analyzed
Description
Improperly Implemented Security Check vulnerability in the SonicWall Hosted Email Security leads to bypass of Capture ATP security service in the appliance. This vulnerability impacts 10.0.17.7319 and earlier versions
Weaknesses (CWE)
- CWE-358 — Improperly Implemented Security Check for Standard
- CWE-290 — Authentication Bypass by Spoofing
References
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | HIGH 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2022-34593
- GCVE · GCVE-0-2022-2324
CERT-FR advisories
- CERTFR-2022-AVI-648 — Multiples vulnérabilités dans les produits SonicWall · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:a:sonicwall:hosted_email_security:*:*:*:*:*:*:*:*≤ 10.0.17.7319
Affected products
| Product | Versions |
|---|---|
| SonicWall · SonicWall Email Security | affected 10.0.17.7319 and earlier |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |