CVE-2022-22277: Infoleak
Published Apr 27, 2022
·Updated
A vulnerability in SonicOS SNMP service resulting exposure of Wireless Access Point sensitive information in cleartext.
Affected Software
129 affected components
SonicWall Tz300p Firmware<6.5.4.10
SonicWall Tz300p Firmware=7.0.0
SonicWall Tz300p
SonicWall Tz300w Firmware<6.5.4.10
SonicWall Tz300w Firmware=7.0.0
SonicWall Tz300w
SonicWall Tz350 Firmware<6.5.4.10
SonicWall Tz350 Firmware=7.0.0
SonicWall Tz350
SonicWall Tz350w Firmware<6.5.4.10
SonicWall Tz350w Firmware=7.0.0
SonicWall Tz350w
SonicWall Nssp 10700 Firmware<7.0.1.0
SonicWall Nssp 10700
SonicWall Nssp 11700 Firmware<7.0.1.0
SonicWall Nssp 11700
SonicWall Nssp 12400 Firmware<7.0.1.0
SonicWall Nssp 12400
SonicWall Nssp 12800 Firmware<7.0.1.0
SonicWall Nssp 12800
SonicWall Nssp 13700 Firmware<7.0.1.0
SonicWall Nssp 13700
SonicWall Nssp 15700 Firmware<7.0.1.0
SonicWall Nssp 15700
SonicWall Tz370 Firmware<6.5.4.10
SonicWall Tz370 Firmware=7.0.0
SonicWall Tz370
SonicWall Tz370w Firmware<6.5.4.10
SonicWall Tz370w Firmware=7.0.0
SonicWall Tz370w
SonicWall Tz400 Firmware<6.5.4.10
SonicWall Tz400 Firmware=7.0.0
SonicWall Tz400
SonicWall Nsv 10 Firmware<7.0.1.0
SonicWall Nsv 10
SonicWall Nsv 100 Firmware<7.0.1.0
SonicWall Nsv 100
SonicWall Nsv 1600 Firmware<7.0.1.0
SonicWall Nsv 1600
SonicWall Nsv 200 Firmware<7.0.1.0
SonicWall Nsv 200
SonicWall Nsv 25 Firmware<7.0.1.0
SonicWall Nsv 25
SonicWall Nsv 270 Firmware<7.0.1.0
SonicWall Nsv 270
SonicWall Nsv 300 Firmware<7.0.1.0
SonicWall Nsv 300
SonicWall Nsv 400 Firmware<7.0.1.0
SonicWall Nsv 400
SonicWall Nsv 470 Firmware<7.0.1.0
SonicWall Nsv 470
SonicWall Nsv 50 Firmware<7.0.1.0
SonicWall Nsv 50
SonicWall Nsv 800 Firmware<7.0.1.0
SonicWall Nsv 800
SonicWall Nsv 870 Firmware<7.0.1.0
SonicWall Nsv 870
SonicWall Tz400w Firmware<6.5.4.10
SonicWall Tz400w Firmware=7.0.0
SonicWall Tz400w
SonicWall Tz470 Firmware<6.5.4.10
SonicWall Tz470 Firmware=7.0.0
SonicWall Tz470
SonicWall Tz470w Firmware<6.5.4.10
SonicWall Tz470w Firmware=7.0.0
SonicWall Tz470w
SonicWall Tz500 Firmware<6.5.4.10
SonicWall Tz500 Firmware=7.0.0
SonicWall Tz500
SonicWall Nsa 2650 Firmware<6.5.4.10
SonicWall Nsa 2650 Firmware=7.0.0
SonicWall Nsa 2650
SonicWall Nsa 2700 Firmware<6.5.4.10
SonicWall Nsa 2700 Firmware=7.0.0
SonicWall Nsa 2700
SonicWall Nsa 3650 Firmware<6.5.4.10
SonicWall Nsa 3650 Firmware=7.0.0
SonicWall Nsa 3650
SonicWall Nsa 3700 Firmware<6.5.4.10
SonicWall Nsa 3700 Firmware=7.0.0
SonicWall Nsa 3700
SonicWall Nsa 4650 Firmware<6.5.4.10
SonicWall Nsa 4650 Firmware=7.0.0
SonicWall Nsa 4650
SonicWall Nsa 4700 Firmware<6.5.4.10
SonicWall Nsa 4700 Firmware=7.0.0
SonicWall Nsa 4700
SonicWall Nsa 5650 Firmware<6.5.4.10
SonicWall Nsa 5650 Firmware=7.0.0
SonicWall Nsa 5650
SonicWall Nsa 5700 Firmware<6.5.4.10
SonicWall Nsa 5700 Firmware=7.0.0
SonicWall Nsa 5700
SonicWall Nsa 6650 Firmware<6.5.4.10
SonicWall Nsa 6650 Firmware=7.0.0
SonicWall Nsa 6650
SonicWall Nsa 6700 Firmware<6.5.4.10
SonicWall Nsa 6700 Firmware=7.0.0
SonicWall Nsa 6700
SonicWall Nsa 9250 Firmware<6.5.4.10
SonicWall Nsa 9250 Firmware=7.0.0
SonicWall Nsa 9250
SonicWall Nsa 9450 Firmware<6.5.4.10
SonicWall Nsa 9450 Firmware=7.0.0
SonicWall Nsa 9450
SonicWall Nsa 9650 Firmware<6.5.4.10
SonicWall Nsa 9650 Firmware=7.0.0
SonicWall Nsa 9650
SonicWall Tz500w Firmware<6.5.4.10
SonicWall Tz500w Firmware=7.0.0
SonicWall Tz500w
SonicWall Tz570 Firmware<6.5.4.10
SonicWall Tz570 Firmware=7.0.0
SonicWall Tz570
SonicWall Tz570p Firmware<6.5.4.10
SonicWall Tz570p Firmware=7.0.0
SonicWall Tz570p
SonicWall Tz570w Firmware<6.5.4.10
SonicWall Tz570w Firmware=7.0.0
SonicWall Tz570w
SonicWall Tz600 Firmware<6.5.4.10
SonicWall Tz600 Firmware=7.0.0
SonicWall Tz600
SonicWall Tz600p Firmware<6.5.4.10
SonicWall Tz600p Firmware=7.0.0
SonicWall Tz600p
SonicWall Tz670 Firmware<6.5.4.10
SonicWall Tz670 Firmware=7.0.0
SonicWall Tz670
Event History
Apr 27, 2022
CVE Published
via MITRE·04:25 PM
Data Sourced
via MITRE·04:25 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-22277?
The severity of CVE-2022-22277 is rated as medium with a CVSS score of 5.3.
2
How can I fix the vulnerability in SonicOS SNMP service exposing Wireless Access Point sensitive information in cleartext?
To fix the vulnerability, update the affected Sonicwall firmware versions to the patched versions 7.0.0 or higher.
3
Is Sonicwall Tz300p Firmware affected by CVE-2022-22277?
Yes, Sonicwall Tz300p Firmware with versions up to 6.5.4.10 is affected by the vulnerability.
4
Where can I find more information about CVE-2022-22277?
More information about CVE-2022-22277 can be found at the Sonicwall PSIRT website.