CVE-2022-1703

Summary

Improper neutralization of special elements in the SonicWall SSL-VPN SMA100 series management interface allows a remote authenticated attacker to inject OS Commands which potentially leads to remote command execution vulnerability or denial of service (DoS) attack.

Affected Software

VendorProductVersion RangeStatus
SonicWallSMA10010.2.1.4-31sv and earlieraffected
SonicWallSMA10010.2.0.9-41sv and earlieraffected

Weaknesses

  • CWE-78: CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

ADP Enrichment

CVE Program Container

Additional References

References