CVE-2022-22275
HIGH
7.5
CVSS Score
Published: April 27, 2022 at 04:25 PM UTC
Updated: June 17, 2026 at 04:28 AM UTC
53 products affected across 1 vendorSonicOSTz570Tz370
Using SonicOS by SonicWall?
Get instant alerts when new vulnerabilities affect SonicOS - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
HIGH7.5
Exploit prediction
EPSS 1%
Description
Improper Restriction of TCP Communication Channel in HTTP/S inbound traffic from WAN to DMZ bypassing security policy until TCP handshake potentially resulting in Denial of Service (DoS) attack if a target host is vulnerable.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
v ≤ 7.0.1-5030-R2007v ≤ 7.0.1-5030-R780v ≤ 7.0.1.0-5030-13917.0.0.0 ≤ v ≤ 7.0.1-5030-r20077.0.0.0 ≤ v ≤ 7.0.1-5030-r7807.0.0.0 ≤ v ≤ 7.0.1.0-5030-1391
sonicwall-nsa-2650 (environment) · sonicwall-nsa-2700 (environment) · sonicwall-nsa-3650 (environment) · sonicwall-nsa-3700 (environment) · sonicwall-nsa-4650 (environment) · sonicwall-nsa-4700 (environment) · sonicwall-nsa-5650 (environment) · sonicwall-nsa-5700 (environment) · sonicwall-nsa-6650 (environment) · sonicwall-nsa-6700 (environment) · sonicwall-nsa-9250 (environment) · sonicwall-nsa-9450 (environment) · sonicwall-nsa-9650 (environment) · sonicwall-nssp-10700 (environment) · sonicwall-nssp-11700 (environment) · sonicwall-nssp-12400 (environment) · sonicwall-nssp-12800 (environment) · sonicwall-nssp-13700 (environment) · sonicwall-nsv-10 (environment) · sonicwall-nsv-100 (environment) · sonicwall-nsv-200 (environment) · sonicwall-nsv-25 (environment) · sonicwall-nsv-270 (environment) · sonicwall-nsv-300 (environment) · sonicwall-nsv-400 (environment) · sonicwall-nsv-470 (environment) · sonicwall-nsv-50 (environment) · sonicwall-nsv-800 (environment) · sonicwall-nsv-870 (environment) · sonicwall-soho-250 (environment) · sonicwall-soho-250w (environment) · sonicwall-tz270 (environment) · sonicwall-tz270w (environment) · sonicwall-tz300 (environment) · sonicwall-tz300p (environment) · sonicwall-tz300w (environment) · sonicwall-tz350 (environment) · sonicwall-tz350w (environment) · sonicwall-tz370 (environment) · sonicwall-tz370w (environment) · sonicwall-tz400 (environment) · sonicwall-tz400w (environment) · sonicwall-tz470 (environment) · sonicwall-tz470w (environment) · sonicwall-tz500 (environment) · sonicwall-tz500w (environment) · sonicwall-tz570 (environment) · sonicwall-tz570p (environment) · sonicwall-tz570w (environment) · sonicwall-tz600 (environment) · sonicwall-tz600p (environment) · sonicwall-tz670 (environment)
Nsa 2650· SonicWalldevice
80%All versions
Nsa 2700· SonicWalldevice
80%All versions
Nsa 3650· SonicWalldevice
80%All versions
Nsa 3700· SonicWalldevice
80%All versions
Nsa 4650· SonicWalldevice
80%All versions
Nsa 4700· SonicWalldevice
80%All versions
Nsa 5650· SonicWalldevice
80%All versions
Nsa 5700· SonicWalldevice
80%All versions
Nsa 6650· SonicWalldevice
80%All versions
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (1)
x_refsource_CONFIRMVendor Advisory
Source: [email protected]
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0004CVSS
- Attack Vector
- NETWORK
- Complexity
- LOW
- Privileges
- NONE
- User Interaction
- NONE
- Scope
- UNCHANGED
- Confidentiality
- NONE
- Integrity
- NONE
- Availability
- HIGH
Vector?
Quick Info
StatusMODIFIED
CWE
CWE-400NVD-CWE-noinfo
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card