Files
vuln-nvd/data/2022/CVE-2022-2323.json
T

2 lines
4.9 KiB
JSON

{"affected":[{"affectedData":[{"product":"SonicWall Switch","vendor":"SonicWall","versions":[{"status":"affected","version":"1.1.1.0-2s and earlier"}]}],"source":"PSIRT@sonicwall.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:sonicwall:sws12-10fpoe_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"2F4A15BB-4E46-4CD2-8400-EF5F4B01B249","versionEndExcluding":"1.2.0.0-3","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:sonicwall:sws12-10fpoe:-:*:*:*:*:*:*:*","matchCriteriaId":"AC1B14D9-15C7-4490-9A2C-4FD9462CF465","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:sonicwall:sws12-8_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"30379D90-16A7-4F69-879B-7C2561C56DF5","versionEndExcluding":"1.2.0.0-3","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:sonicwall:sws12-8:-:*:*:*:*:*:*:*","matchCriteriaId":"F93E9E20-D465-490B-B2E0-A92670684ECE","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:sonicwall:sws12-8poe_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"FD691E0B-803E-4747-8A4F-346B7DAF9388","versionEndExcluding":"1.2.0.0-3","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:sonicwall:sws12-8poe:-:*:*:*:*:*:*:*","matchCriteriaId":"A756CC39-180C-4293-8A45-7C55DC88639B","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:sonicwall:sws14-24_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"DF279AEE-9D3F-45F6-AB43-A1F96F4F8AA8","versionEndExcluding":"1.2.0.0-3","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:sonicwall:sws14-24:-:*:*:*:*:*:*:*","matchCriteriaId":"72DF3E57-4840-4327-9796-D92F663FFF4E","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:sonicwall:sws14-24fpoe_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"1D41CA3A-E9C4-4708-A98C-3B7651F5A321","versionEndExcluding":"1.2.0.0-3","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:sonicwall:sws14-24fpoe:-:*:*:*:*:*:*:*","matchCriteriaId":"68C4A661-5DAE-41B2-8D51-8E8F0AB4E26E","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:sonicwall:sws14-48_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"5A9257A0-78F2-4CC5-92A6-271E3AD734F7","versionEndExcluding":"1.2.0.0-3","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:sonicwall:sws14-48:-:*:*:*:*:*:*:*","matchCriteriaId":"04079B4A-8CF2-4D17-B9AB-CF9A84692CAD","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:sonicwall:sws14-48fpoe_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"139E15A5-C97A-410C-A7CA-C56B6182127F","versionEndExcluding":"1.2.0.0-3","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:sonicwall:sws14-48fpoe:-:*:*:*:*:*:*:*","matchCriteriaId":"49B54692-77FD-411F-90F4-AAE31E48D5B8","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Improper neutralization of special elements used in a user input allows an authenticated malicious user to perform remote code execution in the host system. This vulnerability impacts SonicWall Switch 1.1.1.0-2s and earlier versions"},{"lang":"es","value":"Una neutralización inapropiada de los elementos especiales usados en una entrada de usuario permite a un usuario malicioso autenticado llevar a cabo una ejecución de código remota en el sistema anfitrión. Esta vulnerabilidad afecta a SonicWall Switch versiones 1.1.1-2s y anteriores"}],"id":"CVE-2022-2323","lastModified":"2026-06-17T04:41:41.687","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2022-07-29T20:15:13.223","references":[{"source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"],"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0013"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0013"}],"sourceIdentifier":"PSIRT@sonicwall.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-77"}],"source":"PSIRT@sonicwall.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-77"}],"source":"nvd@nist.gov","type":"Primary"}]}