A Stack-based buffer overflow vulnerability in the SonicOS via HTTP request allows a remote unauthenticated attacker to cause Denial of Service (DoS) or potentially results in code execution in the firewall.

According to Bishop Fox, 178,637 or 76% of SonicWall firewalls with management interfaces exposed to the internet are vulnerable to one of the two CVEs (CVE-2022-22274, CVE-2023-0656). Because of this exposure and availability of proof-of-concept details, these flaws require additional monitoring.

Detections

Analytics

CVE-2022-22274

critical

Vulnerable Software