CVE-2022-22277

Severity: medium (CVSS 5.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-04-27 · updated 2026-06-17
Weakness: CWE-200

Description

A vulnerability in SonicOS SNMP service resulting exposure of Wireless Access Point sensitive information in cleartext.

Affected products

SonicWall Nsa 2650 Firmware: before 6.5.4.10; 7.0.0 — fixed in 6.5.4.10
SonicWall Nsa 2700 Firmware: before 6.5.4.10; 7.0.0 — fixed in 6.5.4.10
SonicWall Nsa 3650 Firmware: before 6.5.4.10; 7.0.0 — fixed in 6.5.4.10
SonicWall Nsa 3700 Firmware: before 6.5.4.10; 7.0.0 — fixed in 6.5.4.10
SonicWall Nsa 4650 Firmware: before 6.5.4.10; 7.0.0 — fixed in 6.5.4.10
SonicWall Nsa 4700 Firmware: before 6.5.4.10; 7.0.0 — fixed in 6.5.4.10
SonicWall Nsa 5650 Firmware: before 6.5.4.10; 7.0.0 — fixed in 6.5.4.10
SonicWall Nsa 5700 Firmware: before 6.5.4.10; 7.0.0 — fixed in 6.5.4.10
SonicWall Nsa 6650 Firmware: before 6.5.4.10; 7.0.0 — fixed in 6.5.4.10
SonicWall Nsa 6700 Firmware: before 6.5.4.10; 7.0.0 — fixed in 6.5.4.10
SonicWall Nsa 9250 Firmware: before 6.5.4.10; 7.0.0 — fixed in 6.5.4.10
SonicWall Nsa 9450 Firmware: before 6.5.4.10; 7.0.0 — fixed in 6.5.4.10
SonicWall Nsa 9650 Firmware: before 6.5.4.10; 7.0.0 — fixed in 6.5.4.10
SonicWall Nssp 10700 Firmware: before 7.0.1.0 — fixed in 7.0.1.0
SonicWall Nssp 11700 Firmware: before 7.0.1.0 — fixed in 7.0.1.0
SonicWall Nssp 12400 Firmware: before 7.0.1.0 — fixed in 7.0.1.0
SonicWall Nssp 12800 Firmware: before 7.0.1.0 — fixed in 7.0.1.0
SonicWall Nssp 13700 Firmware: before 7.0.1.0 — fixed in 7.0.1.0
SonicWall Nssp 15700 Firmware: before 7.0.1.0 — fixed in 7.0.1.0
SonicWall Nsv 100 Firmware: before 7.0.1.0 — fixed in 7.0.1.0
SonicWall Nsv 10 Firmware: before 7.0.1.0 — fixed in 7.0.1.0
SonicWall Nsv 1600 Firmware: before 7.0.1.0 — fixed in 7.0.1.0
SonicWall Nsv 200 Firmware: before 7.0.1.0 — fixed in 7.0.1.0
SonicWall Nsv 25 Firmware: before 7.0.1.0 — fixed in 7.0.1.0
SonicWall Nsv 270 Firmware: before 7.0.1.0 — fixed in 7.0.1.0
SonicWall Nsv 300 Firmware: before 7.0.1.0 — fixed in 7.0.1.0
SonicWall Nsv 400 Firmware: before 7.0.1.0 — fixed in 7.0.1.0
SonicWall Nsv 470 Firmware: before 7.0.1.0 — fixed in 7.0.1.0
SonicWall Nsv 50 Firmware: before 7.0.1.0 — fixed in 7.0.1.0
SonicWall Nsv 800 Firmware: before 7.0.1.0 — fixed in 7.0.1.0

How to fix

Upgrade to a fixed version: SonicWall Nsa 2650 Firmware 6.5.4.10; SonicWall Nsa 2700 Firmware 6.5.4.10; SonicWall Nsa 3650 Firmware 6.5.4.10; SonicWall Nsa 3700 Firmware 6.5.4.10; SonicWall Nsa 4650 Firmware 6.5.4.10; SonicWall Nsa 4700 Firmware 6.5.4.10; SonicWall Nsa 5650 Firmware 6.5.4.10; SonicWall Nsa 5700 Firmware 6.5.4.10; SonicWall Nsa 6650 Firmware 6.5.4.10; SonicWall Nsa 6700 Firmware 6.5.4.10; SonicWall Nsa 9250 Firmware 6.5.4.10; SonicWall Nsa 9450 Firmware 6.5.4.10. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2022-22277 or the next vulnerability affects your stack