CVE-2022-22277

high-risk
Published 2022-04-27

A vulnerability in SonicOS SNMP service resulting exposure of Wireless Access Point sensitive information in cleartext.

Do I need to act?

-
0.18% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
5
CVSS 5.3/10 Medium
NETWORK / LOW complexity

Affected Products (20)

Tz300P Firmware
Tz300P Firmware
Tz300W Firmware
Tz300W Firmware
Tz350 Firmware
Tz350 Firmware
Tz350W Firmware
Tz350W Firmware
Nssp 10700 Firmware
Nssp 11700 Firmware
Nssp 12400 Firmware
Nssp 12800 Firmware
Nssp 13700 Firmware
Nssp 15700 Firmware
Tz370 Firmware
Tz370 Firmware
Tz370W Firmware
Tz370W Firmware
Tz400 Firmware
Tz400 Firmware

Affected Vendors

Sonicwall

References (2)

Vendor Advisory https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0004
Vendor Advisory https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0004
51
/ 100
high-risk
Severity 21/34 · High
Exploitability 1/34 · Minimal
Exposure 29/34 · Critical