CVEvulnerability

CVE-2022-22278

7.5 HIGH Published 2022-04-27 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-04-27
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-770

Description

A vulnerability in SonicOS CFS (Content filtering service) returns a large 403 forbidden HTTP response message to the source address when users try to access prohibited resource this allows an attacker to cause HTTP Denial of Service (DoS) attack

Affected configurations

• sonicwall tz300p firmware (< 7.0.1) • sonicwall tz300w firmware (< 7.0.1) • sonicwall tz350 firmware (< 7.0.1) • sonicwall tz350w firmware (< 7.0.1) • sonicwall nssp 10700 firmware (< 7.0.1.0) • sonicwall nssp 11700 firmware (< 7.0.1.0) • sonicwall nssp 12400 firmware (< 7.0.1.0) • sonicwall nssp 12800 firmware (< 7.0.1.0) • sonicwall nssp 13700 firmware (< 7.0.1.0) • sonicwall nssp 15700 firmware (< 7.0.1.0) • sonicwall tz370 firmware (< 7.0.1) • sonicwall tz370w firmware (< 7.0.1) • sonicwall tz400 firmware (< 7.0.1) • sonicwall nsv 10 firmware (< 7.0.1.0) • sonicwall nsv 100 firmware (< 7.0.1.0) • sonicwall nsv 1600 firmware (< 7.0.1.0) • sonicwall nsv 200 firmware (< 7.0.1.0) • sonicwall nsv 25 firmware (< 7.0.1.0) • sonicwall nsv 270 firmware (< 7.0.1.0) • sonicwall nsv 300 firmware (< 7.0.1.0) • sonicwall nsv 400 firmware (< 7.0.1.0) • sonicwall nsv 470 firmware (< 7.0.1.0) • sonicwall nsv 50 firmware (< 7.0.1.0) • sonicwall nsv 800 firmware (< 7.0.1.0) • sonicwall nsv 870 firmware (< 7.0.1.0) • sonicwall tz400w firmware (< 7.0.1) • sonicwall tz470 firmware (< 7.0.1) • sonicwall tz470w firmware (< 7.0.1) • sonicwall tz500 firmware (< 7.0.1) • sonicwall nsa 2650 firmware (< 7.0.1) • sonicwall nsa 2700 firmware (< 7.0.1) • sonicwall nsa 3650 firmware (< 7.0.1) • sonicwall nsa 3700 firmware (< 7.0.1) • sonicwall nsa 4650 firmware (< 7.0.1) • sonicwall nsa 4700 firmware (< 7.0.1) • sonicwall nsa 5650 firmware (< 7.0.1) • sonicwall nsa 5700 firmware (< 7.0.1) • sonicwall nsa 6650 firmware (< 7.0.1) • sonicwall nsa 6700 firmware (< 7.0.1) • sonicwall nsa 9250 firmware (< 7.0.1) • sonicwall nsa 9450 firmware (< 7.0.1) • sonicwall nsa 9650 firmware (< 7.0.1) • sonicwall tz500w firmware (< 7.0.1) • sonicwall tz570 firmware (< 7.0.1) • sonicwall tz570p firmware (< 7.0.1) • sonicwall tz570w firmware (< 7.0.1) • sonicwall tz600 firmware (< 7.0.1) • sonicwall tz600p firmware (< 7.0.1) • sonicwall tz670 firmware (< 7.0.1)

Related

Weakness · CWE (1)

  • CWE-770 Allocation of Resources Without Limits or Throttling weakness

References