CVE-2022-22276

moderate-risk
Published 2022-04-27

A vulnerability in SonicOS SNMP service resulting exposure of sensitive information to an unauthorized user.

Do I need to act?

-
0.17% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
5
CVSS 5.3/10 Medium
NETWORK / LOW complexity

Affected Products (20)

Tz300P Firmware
Tz300W Firmware
Tz350 Firmware
Tz350W Firmware
Nssp 10700 Firmware
Nssp 11700 Firmware
Nssp 12400 Firmware
Nssp 12800 Firmware
Nssp 13700 Firmware
Nssp 15700 Firmware
Tz370 Firmware
Tz370W Firmware
Tz400 Firmware
Nsv 10 Firmware
Nsv 100 Firmware
Nsv 1600 Firmware
Nsv 200 Firmware
Nsv 25 Firmware
Nsv 270 Firmware
Nsv 300 Firmware

Affected Vendors

Sonicwall

References (2)

Vendor Advisory https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0004
Vendor Advisory https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0004
47
/ 100
moderate-risk
Severity 21/34 · High
Exploitability 1/34 · Minimal
Exposure 25/34 · High