Vulnerability · Published Jul 29, 2022 · Assigned by sonicwall
CVE-2022-2324
High 7.5
In plain English
A high-severity security flaw in SonicWall Email Security from SonicWall. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 51% of all known vulnerabilities).
Severity (CVSS NVD)7.5High
Exploit odds (30 days)0.6%top 49.4% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Improperly Implemented Security Check vulnerability in the SonicWall Hosted Email Security leads to bypass of Capture ATP security service in the appliance. This vulnerability impacts 10.0.17.7319 and earlier versions
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SonicWall | SonicWall Email Security | 10.0.17.7319 and earlier |
Weakness: CWE-358
References
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0014 x_refsource_CONFIRM