Vulnerability · Published Mar 25, 2022 · Assigned by sonicwall
CVE-2022-22274
Critical 9.8
In plain English
A critical-severity stack buffer overflow in SonicOS from SonicWall. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 75.5% (higher than 99.5% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.
Severity (CVSS NVD)9.8Critical
Exploit odds (30 days)75.5%top 0.5% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack tooling1Public PoC
Official description
A Stack-based buffer overflow vulnerability in the SonicOS via HTTP request allows a remote unauthenticated attacker to cause Denial of Service (DoS) or potentially results in code execution in the firewall.
Affected products (as reported)
Weakness: CWE-121
References
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0003 x_refsource_CONFIRM