CVE-2022-2323

{"id": "CVE-2022-2323", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "published": "2022-07-29T20:15:13.223", "references": [{"url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0013", "tags": ["Vendor Advisory"], "source": "PSIRT@sonicwall.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-77"}]}, {"type": "Secondary", "source": "PSIRT@sonicwall.com", "description": [{"lang": "en", "value": "CWE-77"}]}], "descriptions": [{"lang": "en", "value": "Improper neutralization of special elements used in a user input allows an authenticated malicious user to perform remote code execution in the host system. This vulnerability impacts SonicWall Switch 1.1.1.0-2s and earlier versions"}, {"lang": "es", "value": "Una neutralizaci\u00f3n inapropiada de los elementos especiales usados en una entrada de usuario permite a un usuario malicioso autenticado llevar a cabo una ejecuci\u00f3n de c\u00f3digo remota en el sistema anfitri\u00f3n. Esta vulnerabilidad afecta a SonicWall Switch versiones 1.1.1-2s y anteriores"}], "lastModified": "2022-08-08T16:12:55.777", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:sonicwall:sws12-10fpoe_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2F4A15BB-4E46-4CD2-8400-EF5F4B01B249", "versionEndExcluding": "1.2.0.0-3"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:sonicwall:sws12-10fpoe:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "AC1B14D9-15C7-4490-9A2C-4FD9462CF465"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:sonicwall:sws12-8_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "30379D90-16A7-4F69-879B-7C2561C56DF5", "versionEndExcluding": "1.2.0.0-3"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:sonicwall:sws12-8:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F93E9E20-D465-490B-B2E0-A92670684ECE"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:sonicwall:sws12-8poe_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FD691E0B-803E-4747-8A4F-346B7DAF9388", "versionEndExcluding": "1.2.0.0-3"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:sonicwall:sws12-8poe:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A756CC39-180C-4293-8A45-7C55DC88639B"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:sonicwall:sws14-24_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DF279AEE-9D3F-45F6-AB43-A1F96F4F8AA8", "versionEndExcluding": "1.2.0.0-3"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:sonicwall:sws14-24:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "72DF3E57-4840-4327-9796-D92F663FFF4E"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:sonicwall:sws14-24fpoe_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1D41CA3A-E9C4-4708-A98C-3B7651F5A321", "versionEndExcluding": "1.2.0.0-3"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:sonicwall:sws14-24fpoe:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "68C4A661-5DAE-41B2-8D51-8E8F0AB4E26E"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:sonicwall:sws14-48_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5A9257A0-78F2-4CC5-92A6-271E3AD734F7", "versionEndExcluding": "1.2.0.0-3"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:sonicwall:sws14-48:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "04079B4A-8CF2-4D17-B9AB-CF9A84692CAD"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:sonicwall:sws14-48fpoe_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "139E15A5-C97A-410C-A7CA-C56B6182127F", "versionEndExcluding": "1.2.0.0-3"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:sonicwall:sws14-48fpoe:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "49B54692-77FD-411F-90F4-AAE31E48D5B8"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "PSIRT@sonicwall.com"}