CVE-2022-22277
Medium
Description
A vulnerability in SonicOS SNMP service resulting exposure of Wireless Access Point sensitive information in cleartext.
SeverityMedium
CVSS5.3
Exploit probability—
Product
Sonicwall Tz300p Firmware
PublishedApr 27, 2022
First seenApr 27, 2022
Weakness typeCWE-200Sensitive information exposure
How to fix
Update
- sonicwall tz300p_firmware6.5.4.10 or later
- sonicwall tz300w_firmware6.5.4.10 or later
- sonicwall tz350_firmware6.5.4.10 or later
- sonicwall tz350w_firmware6.5.4.10 or later
- sonicwall nssp_10700_firmware7.0.1.0 or later
- sonicwall nssp_11700_firmware7.0.1.0 or later
- sonicwall nssp_12400_firmware7.0.1.0 or later
- sonicwall nssp_12800_firmware7.0.1.0 or later
- sonicwall nssp_13700_firmware7.0.1.0 or later
- sonicwall nssp_15700_firmware7.0.1.0 or later
- sonicwall tz370_firmware6.5.4.10 or later
- sonicwall tz370w_firmware6.5.4.10 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sonicwall tz300p_firmware | v < 6.5.4.10, 7.0.0 | 6.5.4.10 |
| sonicwall tz300w_firmware | v < 6.5.4.10, 7.0.0 | 6.5.4.10 |
| sonicwall tz350_firmware | v < 6.5.4.10, 7.0.0 | 6.5.4.10 |
| sonicwall tz350w_firmware | v < 6.5.4.10, 7.0.0 | 6.5.4.10 |
| sonicwall nssp_10700_firmware | v < 7.0.1.0 | 7.0.1.0 |
| sonicwall nssp_11700_firmware | v < 7.0.1.0 | 7.0.1.0 |
| sonicwall nssp_12400_firmware | v < 7.0.1.0 | 7.0.1.0 |
| sonicwall nssp_12800_firmware | v < 7.0.1.0 | 7.0.1.0 |
| sonicwall nssp_13700_firmware | v < 7.0.1.0 | 7.0.1.0 |
| sonicwall nssp_15700_firmware | v < 7.0.1.0 | 7.0.1.0 |
| sonicwall tz370_firmware | v < 6.5.4.10, 7.0.0 | 6.5.4.10 |
| sonicwall tz370w_firmware | v < 6.5.4.10, 7.0.0 | 6.5.4.10 |
| sonicwall tz400_firmware | v < 6.5.4.10, 7.0.0 | 6.5.4.10 |
| sonicwall nsv_10_firmware | v < 7.0.1.0 | 7.0.1.0 |
| sonicwall nsv_100_firmware | v < 7.0.1.0 | 7.0.1.0 |
| sonicwall nsv_1600_firmware | v < 7.0.1.0 | 7.0.1.0 |
| sonicwall nsv_200_firmware | v < 7.0.1.0 | 7.0.1.0 |
| sonicwall nsv_25_firmware | v < 7.0.1.0 | 7.0.1.0 |
| sonicwall nsv_270_firmware | v < 7.0.1.0 | 7.0.1.0 |
| sonicwall nsv_300_firmware | v < 7.0.1.0 | 7.0.1.0 |
| sonicwall nsv_400_firmware | v < 7.0.1.0 | 7.0.1.0 |
| sonicwall nsv_470_firmware | v < 7.0.1.0 | 7.0.1.0 |
| sonicwall nsv_50_firmware | v < 7.0.1.0 | 7.0.1.0 |
| sonicwall nsv_800_firmware | v < 7.0.1.0 | 7.0.1.0 |
| sonicwall nsv_870_firmware | v < 7.0.1.0 | 7.0.1.0 |
| sonicwall tz400w_firmware | v < 6.5.4.10, 7.0.0 | 6.5.4.10 |
| sonicwall tz470_firmware | v < 6.5.4.10, 7.0.0 | 6.5.4.10 |
| sonicwall tz470w_firmware | v < 6.5.4.10, 7.0.0 | 6.5.4.10 |
| sonicwall tz500_firmware | v < 6.5.4.10, 7.0.0 | 6.5.4.10 |
| sonicwall nsa_2650_firmware | v < 6.5.4.10, 7.0.0 | 6.5.4.10 |
| sonicwall nsa_2700_firmware | v < 6.5.4.10, 7.0.0 | 6.5.4.10 |
| sonicwall nsa_3650_firmware | v < 6.5.4.10, 7.0.0 | 6.5.4.10 |
| sonicwall nsa_3700_firmware | v < 6.5.4.10, 7.0.0 | 6.5.4.10 |
| sonicwall nsa_4650_firmware | v < 6.5.4.10, 7.0.0 | 6.5.4.10 |
| sonicwall nsa_4700_firmware | v < 6.5.4.10, 7.0.0 | 6.5.4.10 |
| sonicwall nsa_5650_firmware | v < 6.5.4.10, 7.0.0 | 6.5.4.10 |
| sonicwall nsa_5700_firmware | v < 6.5.4.10, 7.0.0 | 6.5.4.10 |
| sonicwall nsa_6650_firmware | v < 6.5.4.10, 7.0.0 | 6.5.4.10 |
| sonicwall nsa_6700_firmware | v < 6.5.4.10, 7.0.0 | 6.5.4.10 |
| sonicwall nsa_9250_firmware | v < 6.5.4.10, 7.0.0 | 6.5.4.10 |
| sonicwall nsa_9450_firmware | v < 6.5.4.10, 7.0.0 | 6.5.4.10 |
| sonicwall nsa_9650_firmware | v < 6.5.4.10, 7.0.0 | 6.5.4.10 |
| sonicwall tz500w_firmware | v < 6.5.4.10, 7.0.0 | 6.5.4.10 |
| sonicwall tz570_firmware | v < 6.5.4.10, 7.0.0 | 6.5.4.10 |
| sonicwall tz570p_firmware | v < 6.5.4.10, 7.0.0 | 6.5.4.10 |
| sonicwall tz570w_firmware | v < 6.5.4.10, 7.0.0 | 6.5.4.10 |
| sonicwall tz600_firmware | v < 6.5.4.10, 7.0.0 | 6.5.4.10 |
| sonicwall tz600p_firmware | v < 6.5.4.10, 7.0.0 | 6.5.4.10 |
| sonicwall tz670_firmware | v < 6.5.4.10, 7.0.0 | 6.5.4.10 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.