What’s Vulnerable › Vulnerabilities
CVE-2022-22278
- Severity: high (CVSS 7.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.0% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2022-04-27 · updated 2026-06-17
- Weakness: CWE-770
Description
A vulnerability in SonicOS CFS (Content filtering service) returns a large 403 forbidden HTTP response message to the source address when users try to access prohibited resource this allows an attacker to cause HTTP Denial of Service (DoS) attack
Affected products
- SonicWall Nsa 2650 Firmware: before 7.0.1 — fixed in 7.0.1
- SonicWall Nsa 2700 Firmware: before 7.0.1 — fixed in 7.0.1
- SonicWall Nsa 3650 Firmware: before 7.0.1 — fixed in 7.0.1
- SonicWall Nsa 3700 Firmware: before 7.0.1 — fixed in 7.0.1
- SonicWall Nsa 4650 Firmware: before 7.0.1 — fixed in 7.0.1
- SonicWall Nsa 4700 Firmware: before 7.0.1 — fixed in 7.0.1
- SonicWall Nsa 5650 Firmware: before 7.0.1 — fixed in 7.0.1
- SonicWall Nsa 5700 Firmware: before 7.0.1 — fixed in 7.0.1
- SonicWall Nsa 6650 Firmware: before 7.0.1 — fixed in 7.0.1
- SonicWall Nsa 6700 Firmware: before 7.0.1 — fixed in 7.0.1
- SonicWall Nsa 9250 Firmware: before 7.0.1 — fixed in 7.0.1
- SonicWall Nsa 9450 Firmware: before 7.0.1 — fixed in 7.0.1
- SonicWall Nsa 9650 Firmware: before 7.0.1 — fixed in 7.0.1
- SonicWall Nssp 10700 Firmware: before 7.0.1.0 — fixed in 7.0.1.0
- SonicWall Nssp 11700 Firmware: before 7.0.1.0 — fixed in 7.0.1.0
- SonicWall Nssp 12400 Firmware: before 7.0.1.0 — fixed in 7.0.1.0
- SonicWall Nssp 12800 Firmware: before 7.0.1.0 — fixed in 7.0.1.0
- SonicWall Nssp 13700 Firmware: before 7.0.1.0 — fixed in 7.0.1.0
- SonicWall Nssp 15700 Firmware: before 7.0.1.0 — fixed in 7.0.1.0
- SonicWall Nsv 100 Firmware: before 7.0.1.0 — fixed in 7.0.1.0
- SonicWall Nsv 10 Firmware: before 7.0.1.0 — fixed in 7.0.1.0
- SonicWall Nsv 1600 Firmware: before 7.0.1.0 — fixed in 7.0.1.0
- SonicWall Nsv 200 Firmware: before 7.0.1.0 — fixed in 7.0.1.0
- SonicWall Nsv 25 Firmware: before 7.0.1.0 — fixed in 7.0.1.0
- SonicWall Nsv 270 Firmware: before 7.0.1.0 — fixed in 7.0.1.0
- SonicWall Nsv 300 Firmware: before 7.0.1.0 — fixed in 7.0.1.0
- SonicWall Nsv 400 Firmware: before 7.0.1.0 — fixed in 7.0.1.0
- SonicWall Nsv 470 Firmware: before 7.0.1.0 — fixed in 7.0.1.0
- SonicWall Nsv 50 Firmware: before 7.0.1.0 — fixed in 7.0.1.0
- SonicWall Nsv 800 Firmware: before 7.0.1.0 — fixed in 7.0.1.0
How to fix
Upgrade to a fixed version: SonicWall Nsa 2650 Firmware 7.0.1; SonicWall Nsa 2700 Firmware 7.0.1; SonicWall Nsa 3650 Firmware 7.0.1; SonicWall Nsa 3700 Firmware 7.0.1; SonicWall Nsa 4650 Firmware 7.0.1; SonicWall Nsa 4700 Firmware 7.0.1; SonicWall Nsa 5650 Firmware 7.0.1; SonicWall Nsa 5700 Firmware 7.0.1; SonicWall Nsa 6650 Firmware 7.0.1; SonicWall Nsa 6700 Firmware 7.0.1; SonicWall Nsa 9250 Firmware 7.0.1; SonicWall Nsa 9450 Firmware 7.0.1. Check the vendor advisory for mitigations.
References
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0004
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0004
Get alerted when CVE-2022-22278 or the next vulnerability affects your stack