← Database

CVE-2022-22273

CRITICAL CVSS: 9.8 Published: 2022-03-17 Modified: 2026-06-17

Description

Improper neutralization of Special Elements leading to OS Command Injection vulnerability impacting end-of-life Secure Remote Access (SRA) products and older firmware versions of Secure Mobile Access (SMA) 100 series products, specifically the SRA appliances running all 8.x, 9.0.0.5-19sv and earlier versions and Secure Mobile Access (SMA) 100 series products running older firmware 9.0.0.9-26sv and earlier versions

Affected Platforms

Sonicwall Sra 1600Sonicwall Sma 500VSonicwall Sra 4600Sonicwall Sma 410 FirmwareSonicwall Sma 200Sonicwall Sma 200 FirmwareSonicwall Sma 500V FirmwareSonicwall Sra 1200 FirmwareSonicwall Sra 1200Sonicwall Sma 210 Firmware

Weakness Type

CWE-78, CWE-78

References