7.5
CVE-2022-22278
- EPSS 0.26%
- Veröffentlicht 27.04.2022 17:15:07
- Zuletzt bearbeitet 21.11.2024 06:46:32
- Quelle PSIRT@sonicwall.com
- Teams Watchlist Login
- Unerledigt Login
A vulnerability in SonicOS CFS (Content filtering service) returns a large 403 forbidden HTTP response message to the source address when users try to access prohibited resource this allows an attacker to cause HTTP Denial of Service (DoS) attack
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sonicwall ≫ Tz300p Firmware Version < 7.0.1
Sonicwall ≫ Tz300w Firmware Version < 7.0.1
Sonicwall ≫ Tz350 Firmware Version < 7.0.1
Sonicwall ≫ Tz350w Firmware Version < 7.0.1
Sonicwall ≫ Nssp 10700 Firmware Version < 7.0.1.0
Sonicwall ≫ Nssp 11700 Firmware Version < 7.0.1.0
Sonicwall ≫ Nssp 12400 Firmware Version < 7.0.1.0
Sonicwall ≫ Nssp 12800 Firmware Version < 7.0.1.0
Sonicwall ≫ Nssp 13700 Firmware Version < 7.0.1.0
Sonicwall ≫ Nssp 15700 Firmware Version < 7.0.1.0
Sonicwall ≫ Tz370 Firmware Version < 7.0.1
Sonicwall ≫ Tz370w Firmware Version < 7.0.1
Sonicwall ≫ Tz400 Firmware Version < 7.0.1
Sonicwall ≫ Nsv 10 Firmware Version < 7.0.1.0
Sonicwall ≫ Nsv 100 Firmware Version < 7.0.1.0
Sonicwall ≫ Nsv 1600 Firmware Version < 7.0.1.0
Sonicwall ≫ Nsv 200 Firmware Version < 7.0.1.0
Sonicwall ≫ Nsv 25 Firmware Version < 7.0.1.0
Sonicwall ≫ Nsv 270 Firmware Version < 7.0.1.0
Sonicwall ≫ Nsv 300 Firmware Version < 7.0.1.0
Sonicwall ≫ Nsv 400 Firmware Version < 7.0.1.0
Sonicwall ≫ Nsv 470 Firmware Version < 7.0.1.0
Sonicwall ≫ Nsv 50 Firmware Version < 7.0.1.0
Sonicwall ≫ Nsv 800 Firmware Version < 7.0.1.0
Sonicwall ≫ Nsv 870 Firmware Version < 7.0.1.0
Sonicwall ≫ Tz400w Firmware Version < 7.0.1
Sonicwall ≫ Tz470 Firmware Version < 7.0.1
Sonicwall ≫ Tz470w Firmware Version < 7.0.1
Sonicwall ≫ Tz500 Firmware Version < 7.0.1
Sonicwall ≫ Nsa 2650 Firmware Version < 7.0.1
Sonicwall ≫ Nsa 2700 Firmware Version < 7.0.1
Sonicwall ≫ Nsa 3650 Firmware Version < 7.0.1
Sonicwall ≫ Nsa 3700 Firmware Version < 7.0.1
Sonicwall ≫ Nsa 4650 Firmware Version < 7.0.1
Sonicwall ≫ Nsa 4700 Firmware Version < 7.0.1
Sonicwall ≫ Nsa 5650 Firmware Version < 7.0.1
Sonicwall ≫ Nsa 5700 Firmware Version < 7.0.1
Sonicwall ≫ Nsa 6650 Firmware Version < 7.0.1
Sonicwall ≫ Nsa 6700 Firmware Version < 7.0.1
Sonicwall ≫ Nsa 9250 Firmware Version < 7.0.1
Sonicwall ≫ Nsa 9450 Firmware Version < 7.0.1
Sonicwall ≫ Nsa 9650 Firmware Version < 7.0.1
Sonicwall ≫ Tz500w Firmware Version < 7.0.1
Sonicwall ≫ Tz570 Firmware Version < 7.0.1
Sonicwall ≫ Tz570p Firmware Version < 7.0.1
Sonicwall ≫ Tz570w Firmware Version < 7.0.1
Sonicwall ≫ Tz600 Firmware Version < 7.0.1
Sonicwall ≫ Tz600p Firmware Version < 7.0.1
Sonicwall ≫ Tz670 Firmware Version < 7.0.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.26% | 0.492 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:N/I:N/A:P
|
CWE-770 Allocation of Resources Without Limits or Throttling
The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.