CVE-2022-2324

Published Jul 29, 2022

Last updated 7 months ago

CVSS high 7.5
Sonicwall

Overview

Description
Improperly Implemented Security Check vulnerability in the SonicWall Hosted Email Security leads to bypass of Capture ATP security service in the appliance. This vulnerability impacts 10.0.17.7319 and earlier versions
Source
PSIRT@sonicwall.com
NVD status
Analyzed
Products
hosted_email_security

Risk scores

CVSS 3.1

Type
Primary
Base score
7.5
Impact score
3.6
Exploitability score
3.9
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Severity
HIGH

Weaknesses

PSIRT@sonicwall.com
CWE-358
nvd@nist.gov
CWE-290

Social media

Hype score
Not currently trending

Configurations