CVE-2022-2323

Improper neutralization of special elements used in a user input allows an authenticated malicious user to perform remote code execution in the host system. This vulnerability impacts SonicWall Switch 1.1.1.0-2s and earlier versions

CVSS v3 8.8 HIGH

8.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0013	Vendor Advisory
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0013	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:sonicwall:sws12-10fpoe_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:sonicwall:sws12-10fpoe:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND

cpe:2.3:o:sonicwall:sws12-8_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:sonicwall:sws12-8:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND

cpe:2.3:o:sonicwall:sws12-8poe_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:sonicwall:sws12-8poe:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND

cpe:2.3:o:sonicwall:sws14-24_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:sonicwall:sws14-24:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND

cpe:2.3:o:sonicwall:sws14-24fpoe_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:sonicwall:sws14-24fpoe:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND

cpe:2.3:o:sonicwall:sws14-48_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:sonicwall:sws14-48:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND

cpe:2.3:o:sonicwall:sws14-48fpoe_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:sonicwall:sws14-48fpoe:-:*:*:*:*:*:*:*

History

21 Nov 2024, 07:00

Type	Values Removed	Values Added
References	~~() https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0013 - Vendor Advisory~~	() https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0013 - Vendor Advisory

Information

Published : 2022-07-29 20:15

Updated : 2024-11-21 07:00

NVD link : CVE-2022-2323

Mitre link : CVE-2022-2323

CVE.ORG link : CVE-2022-2323

JSON object : View

Products Affected

sonicwall

sws14-24fpoe
sws12-8_firmware
sws12-10fpoe
sws14-24
sws12-8
sws14-48_firmware
sws14-48fpoe
sws14-48
sws12-10fpoe_firmware
sws14-24_firmware
sws12-8poe
sws12-8poe_firmware
sws14-24fpoe_firmware
sws14-48fpoe_firmware

CWE

CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')

{"id": "CVE-2022-2323", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "published": "2022-07-29T20:15:13.223", "references": [{"url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0013", "tags": ["Vendor Advisory"], "source": "PSIRT@sonicwall.com"}, {"url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0013", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "PSIRT@sonicwall.com", "description": [{"lang": "en", "value": "CWE-77"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-77"}]}], "descriptions": [{"lang": "en", "value": "Improper neutralization of special elements used in a user input allows an authenticated malicious user to perform remote code execution in the host system. This vulnerability impacts SonicWall Switch 1.1.1.0-2s and earlier versions"}, {"lang": "es", "value": "Una neutralizaci\u00f3n inapropiada de los elementos especiales usados en una entrada de usuario permite a un usuario malicioso autenticado llevar a cabo una ejecuci\u00f3n de c\u00f3digo remota en el sistema anfitri\u00f3n. Esta vulnerabilidad afecta a SonicWall Switch versiones 1.1.1-2s y anteriores"}], "lastModified": "2024-11-21T07:00:46.103", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:sonicwall:sws12-10fpoe_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2F4A15BB-4E46-4CD2-8400-EF5F4B01B249", "versionEndExcluding": "1.2.0.0-3"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:sonicwall:sws12-10fpoe:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "AC1B14D9-15C7-4490-9A2C-4FD9462CF465"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:sonicwall:sws12-8_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "30379D90-16A7-4F69-879B-7C2561C56DF5", "versionEndExcluding": "1.2.0.0-3"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:sonicwall:sws12-8:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F93E9E20-D465-490B-B2E0-A92670684ECE"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:sonicwall:sws12-8poe_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FD691E0B-803E-4747-8A4F-346B7DAF9388", "versionEndExcluding": "1.2.0.0-3"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:sonicwall:sws12-8poe:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A756CC39-180C-4293-8A45-7C55DC88639B"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:sonicwall:sws14-24_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DF279AEE-9D3F-45F6-AB43-A1F96F4F8AA8", "versionEndExcluding": "1.2.0.0-3"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:sonicwall:sws14-24:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "72DF3E57-4840-4327-9796-D92F663FFF4E"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:sonicwall:sws14-24fpoe_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1D41CA3A-E9C4-4708-A98C-3B7651F5A321", "versionEndExcluding": "1.2.0.0-3"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:sonicwall:sws14-24fpoe:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "68C4A661-5DAE-41B2-8D51-8E8F0AB4E26E"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:sonicwall:sws14-48_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5A9257A0-78F2-4CC5-92A6-271E3AD734F7", "versionEndExcluding": "1.2.0.0-3"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:sonicwall:sws14-48:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "04079B4A-8CF2-4D17-B9AB-CF9A84692CAD"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:sonicwall:sws14-48fpoe_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "139E15A5-C97A-410C-A7CA-C56B6182127F", "versionEndExcluding": "1.2.0.0-3"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:sonicwall:sws14-48fpoe:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "49B54692-77FD-411F-90F4-AAE31E48D5B8"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "PSIRT@sonicwall.com"}