CVE-2022-1701 - Vulnerability Details

Vendors	Products
Sonicwall	Sma 6200 Sma 6200 Firmware Sma 6210 Sma 6210 Firmware Sma 7200 Sma 7200 Firmware Sma 7210 Sma 7210 Firmware Sma 8000v Sma 8000v Firmware

Link	Providers
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0009

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "SonicWall SMA1000", "vendor": "SonicWall", "versions": [{"status": "affected", "version": "12.4.0"}, {"status": "affected", "version": "12.4.1"}]}], "descriptions": [{"lang": "en", "value": "SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions uses a shared and hard-coded encryption key to store data."}], "problemTypes": [{"descriptions": [{"cweId": "CWE-321", "description": "CWE-321: Use of Hard-coded Cryptographic Key", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2022-05-13T19:40:14", "orgId": "44b2ff79-1416-4492-88bb-ed0da00c7315", "shortName": "sonicwall"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0009"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "PSIRT@sonicwall.com", "ID": "CVE-2022-1701", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "SonicWall SMA1000", "version": {"version_data": [{"version_value": "12.4.0"}, {"version_value": "12.4.1"}]}}]}, "vendor_name": "SonicWall"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions uses a shared and hard-coded encryption key to store data."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-321: Use of Hard-coded Cryptographic Key"}]}]}, "references": {"reference_data": [{"name": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0009", "refsource": "CONFIRM", "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0009"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T00:10:03.912Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0009"}]}]}, "cveMetadata": {"assignerOrgId": "44b2ff79-1416-4492-88bb-ed0da00c7315", "assignerShortName": "sonicwall", "cveId": "CVE-2022-1701", "datePublished": "2022-05-13T19:40:14", "dateReserved": "2022-05-12T00:00:00", "dateUpdated": "2024-08-03T00:10:03.912Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : SonicWall SMA1000 (string)

vendor : SonicWall (string)

versions : [ »

0 : { »

status : affected (string)

version : 12.4.0 (string)

}

1 : { »

status : affected (string)

version : 12.4.1 (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions uses a shared and hard-coded encryption key to store data. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

cweId : CWE-321 (string)

description : CWE-321: Use of Hard-coded Cryptographic Key (string)

lang : en (string)

type : CWE (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2022-05-13T19:40:14 (string)

orgId : 44b2ff79-1416-4492-88bb-ed0da00c7315 (string)

shortName : sonicwall (string)

}

references : [ »

0 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

]

url : https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0009 (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : PSIRT@sonicwall.com (string)

ID : CVE-2022-1701 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : SonicWall SMA1000 (string)

version : { »

version_data : [ »

0 : { »

version_value : 12.4.0 (string)

}

1 : { »

version_value : 12.4.1 (string)

}

]

}

]

}

vendor_name : SonicWall (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions uses a shared and hard-coded encryption key to store data. (string)

}

]

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : CWE-321: Use of Hard-coded Cryptographic Key (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0009 (string)

refsource : CONFIRM (string)

url : https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0009 (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-03T00:10:03.912Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

1 : x_transferred (string)

]

url : https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0009 (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : 44b2ff79-1416-4492-88bb-ed0da00c7315 (string)

assignerShortName : sonicwall (string)

cveId : CVE-2022-1701 (string)

datePublished : 2022-05-13T19:40:14 (string)

dateReserved : 2022-05-12T00:00:00 (string)

dateUpdated : 2024-08-03T00:10:03.912Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:sonicwall:sma_6200_firmware:12.4.0:*:*:*:*:*:*:*", "matchCriteriaId": "17505971-4213-4CD8-BFCA-C2709ED1D7A8", "vulnerable": true}, {"criteria": "cpe:2.3:o:sonicwall:sma_6200_firmware:12.4.1:*:*:*:*:*:*:*", "matchCriteriaId": "3AD1484C-6DC2-40E8-A423-391F75809A07", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:sonicwall:sma_6200:-:*:*:*:*:*:*:*", "matchCriteriaId": "17BDC1B0-BE6A-4680-A78E-5338AD709095", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:sonicwall:sma_6210_firmware:12.4.0:*:*:*:*:*:*:*", "matchCriteriaId": "9CAF7029-6661-4935-BFF5-DAF27B8D63A7", "vulnerable": true}, {"criteria": "cpe:2.3:o:sonicwall:sma_6210_firmware:12.4.1:*:*:*:*:*:*:*", "matchCriteriaId": "8183E157-625A-4503-B40A-9CF007B8D764", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:sonicwall:sma_6210:-:*:*:*:*:*:*:*", "matchCriteriaId": "0734D1E1-2F59-4832-875F-AB03994B8992", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:sonicwall:sma_7200_firmware:12.4.0:*:*:*:*:*:*:*", "matchCriteriaId": "43F5B5E9-BB13-4222-816D-961EEE2F05A4", "vulnerable": true}, {"criteria": "cpe:2.3:o:sonicwall:sma_7200_firmware:12.4.1:*:*:*:*:*:*:*", "matchCriteriaId": "6988E176-25D8-42E8-918F-E0C8BD5AC41D", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:sonicwall:sma_7200:-:*:*:*:*:*:*:*", "matchCriteriaId": "4C366A02-074C-4F98-AE68-30E0FF85CD00", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:sonicwall:sma_7210_firmware:12.4.0:*:*:*:*:*:*:*", "matchCriteriaId": "311646FD-B277-450D-8B15-00E38A181794", "vulnerable": true}, {"criteria": "cpe:2.3:o:sonicwall:sma_7210_firmware:12.4.1:*:*:*:*:*:*:*", "matchCriteriaId": "5D114762-179F-42A3-A3D5-07F288EA1A39", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:sonicwall:sma_7210:-:*:*:*:*:*:*:*", "matchCriteriaId": "A15BA659-19D1-49AA-B249-EAE5E63B9B9A", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:sonicwall:sma_8000v_firmware:12.4.0:*:*:*:*:*:*:*", "matchCriteriaId": "BDBA4EA4-361A-42F2-B58E-D2327E3FB7D9", "vulnerable": true}, {"criteria": "cpe:2.3:o:sonicwall:sma_8000v_firmware:12.4.1:*:*:*:*:*:*:*", "matchCriteriaId": "806B901C-82C1-4C5F-8C90-0A324F1B676E", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:sonicwall:sma_8000v:-:*:*:*:*:*:*:*", "matchCriteriaId": "83EBB751-21AF-4B5F-BB6D-A18FC760781F", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions uses a shared and hard-coded encryption key to store data."}, {"lang": "es", "value": "El firmware de la serie SonicWall SMA1000 versiones 12.4.0, 12.4.1-02965 y versiones anteriores, usa una clave de cifrado compartida y embebida para almacenar datos"}], "id": "CVE-2022-1701", "lastModified": "2024-11-21T06:41:16.790", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-05-13T20:15:07.870", "references": [{"source": "PSIRT@sonicwall.com", "tags": ["Vendor Advisory"], "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0009"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0009"}], "sourceIdentifier": "PSIRT@sonicwall.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-321"}], "source": "PSIRT@sonicwall.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-798"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:sonicwall:sma_6200_firmware:12.4.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 17505971-4213-4CD8-BFCA-C2709ED1D7A8 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:o:sonicwall:sma_6200_firmware:12.4.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 3AD1484C-6DC2-40E8-A423-391F75809A07 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:sonicwall:sma_6200:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 17BDC1B0-BE6A-4680-A78E-5338AD709095 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

1 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:sonicwall:sma_6210_firmware:12.4.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 9CAF7029-6661-4935-BFF5-DAF27B8D63A7 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:o:sonicwall:sma_6210_firmware:12.4.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 8183E157-625A-4503-B40A-9CF007B8D764 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:sonicwall:sma_6210:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 0734D1E1-2F59-4832-875F-AB03994B8992 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

2 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:sonicwall:sma_7200_firmware:12.4.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 43F5B5E9-BB13-4222-816D-961EEE2F05A4 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:o:sonicwall:sma_7200_firmware:12.4.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 6988E176-25D8-42E8-918F-E0C8BD5AC41D (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:sonicwall:sma_7200:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 4C366A02-074C-4F98-AE68-30E0FF85CD00 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

3 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:sonicwall:sma_7210_firmware:12.4.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 311646FD-B277-450D-8B15-00E38A181794 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:o:sonicwall:sma_7210_firmware:12.4.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 5D114762-179F-42A3-A3D5-07F288EA1A39 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:sonicwall:sma_7210:-:*:*:*:*:*:*:* (string)

matchCriteriaId : A15BA659-19D1-49AA-B249-EAE5E63B9B9A (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

4 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:sonicwall:sma_8000v_firmware:12.4.0:*:*:*:*:*:*:* (string)

matchCriteriaId : BDBA4EA4-361A-42F2-B58E-D2327E3FB7D9 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:o:sonicwall:sma_8000v_firmware:12.4.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 806B901C-82C1-4C5F-8C90-0A324F1B676E (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:sonicwall:sma_8000v:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 83EBB751-21AF-4B5F-BB6D-A18FC760781F (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions uses a shared and hard-coded encryption key to store data. (string)

}

1 : { »

lang : es (string)

value : El firmware de la serie SonicWall SMA1000 versiones 12.4.0, 12.4.1-02965 y versiones anteriores, usa una clave de cifrado compartida y embebida para almacenar datos (string)

}

]

id : CVE-2022-1701 (string)

lastModified : 2024-11-21T06:41:16.790 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : MEDIUM (string)

cvssData : { »

accessComplexity : LOW (string)

accessVector : NETWORK (string)

authentication : NONE (string)

availabilityImpact : NONE (string)

baseScore : 5 (number)

confidentialityImpact : PARTIAL (string)

integrityImpact : NONE (string)

vectorString : AV:N/AC:L/Au:N/C:P/I:N/A:N (string)

version : 2.0 (string)

}

exploitabilityScore : 10 (number)

impactScore : 2.9 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 3.6 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2022-05-13T20:15:07.870 (string)

references : [ »

0 : { »

source : PSIRT@sonicwall.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0009 (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0009 (string)

}

]

sourceIdentifier : PSIRT@sonicwall.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-321 (string)

}

]

source : PSIRT@sonicwall.com (string)

type : Secondary (string)

}

1 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-798 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object