{"containers": {"cna": {"affected": [{"product": "SonicWall Switch", "vendor": "SonicWall", "versions": [{"status": "affected", "version": "1.1.1.0-2s and earlier"}]}], "descriptions": [{"lang": "en", "value": "Improper neutralization of special elements used in a user input allows an authenticated malicious user to perform remote code execution in the host system. This vulnerability impacts SonicWall Switch 1.1.1.0-2s and earlier versions"}], "problemTypes": [{"descriptions": [{"cweId": "CWE-77", "description": "CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2022-07-29T19:15:12", "orgId": "44b2ff79-1416-4492-88bb-ed0da00c7315", "shortName": "sonicwall"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0013"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "[email protected]", "ID": "CVE-2022-2323", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "SonicWall Switch", "version": {"version_data": [{"version_value": "1.1.1.0-2s and earlier"}]}}]}, "vendor_name": "SonicWall"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Improper neutralization of special elements used in a user input allows an authenticated malicious user to perform remote code execution in the host system. This vulnerability impacts SonicWall Switch 1.1.1.0-2s and earlier versions"}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')"}]}]}, "references": {"reference_data": [{"name": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0013", "refsource": "CONFIRM", "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0013"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T00:32:09.648Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0013"}]}]}, "cveMetadata": {"assignerOrgId": "44b2ff79-1416-4492-88bb-ed0da00c7315", "assignerShortName": "sonicwall", "cveId": "CVE-2022-2323", "datePublished": "2022-07-29T19:15:12", "dateReserved": "2022-07-05T00:00:00", "dateUpdated": "2024-08-03T00:32:09.648Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:sonicwall:sws12-10fpoe_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "2F4A15BB-4E46-4CD2-8400-EF5F4B01B249", "versionEndExcluding": "1.2.0.0-3", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:sonicwall:sws12-10fpoe:-:*:*:*:*:*:*:*", "matchCriteriaId": "AC1B14D9-15C7-4490-9A2C-4FD9462CF465", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:sonicwall:sws12-8_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "30379D90-16A7-4F69-879B-7C2561C56DF5", "versionEndExcluding": "1.2.0.0-3", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:sonicwall:sws12-8:-:*:*:*:*:*:*:*", "matchCriteriaId": "F93E9E20-D465-490B-B2E0-A92670684ECE", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:sonicwall:sws12-8poe_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "FD691E0B-803E-4747-8A4F-346B7DAF9388", "versionEndExcluding": "1.2.0.0-3", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:sonicwall:sws12-8poe:-:*:*:*:*:*:*:*", "matchCriteriaId": "A756CC39-180C-4293-8A45-7C55DC88639B", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:sonicwall:sws14-24_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "DF279AEE-9D3F-45F6-AB43-A1F96F4F8AA8", "versionEndExcluding": "1.2.0.0-3", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:sonicwall:sws14-24:-:*:*:*:*:*:*:*", "matchCriteriaId": "72DF3E57-4840-4327-9796-D92F663FFF4E", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:sonicwall:sws14-24fpoe_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "1D41CA3A-E9C4-4708-A98C-3B7651F5A321", "versionEndExcluding": "1.2.0.0-3", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:sonicwall:sws14-24fpoe:-:*:*:*:*:*:*:*", "matchCriteriaId": "68C4A661-5DAE-41B2-8D51-8E8F0AB4E26E", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:sonicwall:sws14-48_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "5A9257A0-78F2-4CC5-92A6-271E3AD734F7", "versionEndExcluding": "1.2.0.0-3", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:sonicwall:sws14-48:-:*:*:*:*:*:*:*", "matchCriteriaId": "04079B4A-8CF2-4D17-B9AB-CF9A84692CAD", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:sonicwall:sws14-48fpoe_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "139E15A5-C97A-410C-A7CA-C56B6182127F", "versionEndExcluding": "1.2.0.0-3", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:sonicwall:sws14-48fpoe:-:*:*:*:*:*:*:*", "matchCriteriaId": "49B54692-77FD-411F-90F4-AAE31E48D5B8", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "Improper neutralization of special elements used in a user input allows an authenticated malicious user to perform remote code execution in the host system. This vulnerability impacts SonicWall Switch 1.1.1.0-2s and earlier versions"}, {"lang": "es", "value": "Una neutralizaci\u00f3n inapropiada de los elementos especiales usados en una entrada de usuario permite a un usuario malicioso autenticado llevar a cabo una ejecuci\u00f3n de c\u00f3digo remota en el sistema anfitri\u00f3n. Esta vulnerabilidad afecta a SonicWall Switch versiones 1.1.1-2s y anteriores"}], "id": "CVE-2022-2323", "lastModified": "2024-11-21T07:00:46.103", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "[email protected]", "type": "Primary"}]}, "published": "2022-07-29T20:15:13.223", "references": [{"source": "[email protected]", "tags": ["Vendor Advisory"], "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0013"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0013"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-77"}], "source": "[email protected]", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-77"}], "source": "[email protected]", "type": "Primary"}]}

{}