CVE-2022-22278

Published: Apr 27, 2022Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

A vulnerability in SonicOS CFS (Content filtering service) returns a large 403 forbidden HTTP response message to the source address when users try to access prohibited resource this allows an attacker to cause HTTP Denial of Service (DoS) attack

Affected (49)

Products: Sonicwall: Tz300p Firmware, Tz300w Firmware, Tz350 Firmware, Tz350w Firmware, Nssp 10700 Firmware, Nssp 11700 Firmware, Nssp 12400 Firmware, Nssp 12800 Firmware, Nssp 13700 Firmware, Nssp 15700 Firmware, Tz370 Firmware, Tz370w Firmware, Tz400 Firmware, Nsv 10 Firmware, Nsv 100 Firmware, Nsv 1600 Firmware, Nsv 200 Firmware, Nsv 25 Firmware, Nsv 270 Firmware, Nsv 300 Firmware, Nsv 400 Firmware, Nsv 470 Firmware, Nsv 50 Firmware, Nsv 800 Firmware, Nsv 870 Firmware, Tz400w Firmware, Tz470 Firmware, Tz470w Firmware, Tz500 Firmware, Nsa 2650 Firmware, Nsa 2700 Firmware, Nsa 3650 Firmware, Nsa 3700 Firmware, Nsa 4650 Firmware, Nsa 4700 Firmware, Nsa 5650 Firmware, Nsa 5700 Firmware, Nsa 6650 Firmware, Nsa 6700 Firmware, Nsa 9250 Firmware, Nsa 9450 Firmware, Nsa 9650 Firmware, Tz500w Firmware, Tz570 Firmware, Tz570p Firmware, Tz570w Firmware, Tz600 Firmware, Tz600p Firmware, Tz670 Firmware

49 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sonicwall Tz300p Firmware	Before 7.0.1

Running on/with	Platform Versions
Sonicwall Tz300p	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sonicwall Tz300w Firmware	Before 7.0.1

Running on/with	Platform Versions
Sonicwall Tz300w	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sonicwall Tz350 Firmware	Before 7.0.1

Running on/with	Platform Versions
Sonicwall Tz350	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sonicwall Tz350w Firmware	Before 7.0.1

Running on/with	Platform Versions
Sonicwall Tz350w	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sonicwall Nssp 10700 Firmware	Before 7.0.1.0

Running on/with	Platform Versions
Sonicwall Nssp 10700	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sonicwall Nssp 11700 Firmware	Before 7.0.1.0

Running on/with	Platform Versions
Sonicwall Nssp 11700	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sonicwall Nssp 12400 Firmware	Before 7.0.1.0

Running on/with	Platform Versions
Sonicwall Nssp 12400	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sonicwall Nssp 12800 Firmware	Before 7.0.1.0

Running on/with	Platform Versions
Sonicwall Nssp 12800	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sonicwall Nssp 13700 Firmware	Before 7.0.1.0

Running on/with	Platform Versions
Sonicwall Nssp 13700	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sonicwall Nssp 15700 Firmware	Before 7.0.1.0

Running on/with	Platform Versions
Sonicwall Nssp 15700	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sonicwall Tz370 Firmware	Before 7.0.1

Running on/with	Platform Versions
Sonicwall Tz370	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sonicwall Tz370w Firmware	Before 7.0.1

Running on/with	Platform Versions
Sonicwall Tz370w	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sonicwall Tz400 Firmware	Before 7.0.1

Running on/with	Platform Versions
Sonicwall Tz400	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sonicwall Nsv 10 Firmware	Before 7.0.1.0

Running on/with	Platform Versions
Sonicwall Nsv 10	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sonicwall Nsv 100 Firmware	Before 7.0.1.0

Running on/with	Platform Versions
Sonicwall Nsv 100	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sonicwall Nsv 1600 Firmware	Before 7.0.1.0

Running on/with	Platform Versions
Sonicwall Nsv 1600	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sonicwall Nsv 200 Firmware	Before 7.0.1.0

Running on/with	Platform Versions
Sonicwall Nsv 200	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sonicwall Nsv 25 Firmware	Before 7.0.1.0

Running on/with	Platform Versions
Sonicwall Nsv 25	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sonicwall Nsv 270 Firmware	Before 7.0.1.0

Running on/with	Platform Versions
Sonicwall Nsv 270	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sonicwall Nsv 300 Firmware	Before 7.0.1.0

Running on/with	Platform Versions
Sonicwall Nsv 300	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sonicwall Nsv 400 Firmware	Before 7.0.1.0

Running on/with	Platform Versions
Sonicwall Nsv 400	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sonicwall Nsv 470 Firmware	Before 7.0.1.0

Running on/with	Platform Versions
Sonicwall Nsv 470	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sonicwall Nsv 50 Firmware	Before 7.0.1.0

Running on/with	Platform Versions
Sonicwall Nsv 50	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sonicwall Nsv 800 Firmware	Before 7.0.1.0

Running on/with	Platform Versions
Sonicwall Nsv 800	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sonicwall Nsv 870 Firmware	Before 7.0.1.0

Running on/with	Platform Versions
Sonicwall Nsv 870	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sonicwall Tz400w Firmware	Before 7.0.1

Running on/with	Platform Versions
Sonicwall Tz400w	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sonicwall Tz470 Firmware	Before 7.0.1

Running on/with	Platform Versions
Sonicwall Tz470	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sonicwall Tz470w Firmware	Before 7.0.1

Running on/with	Platform Versions
Sonicwall Tz470w	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sonicwall Tz500 Firmware	Before 7.0.1

Running on/with	Platform Versions
Sonicwall Tz500	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sonicwall Nsa 2650 Firmware	Before 7.0.1

Running on/with	Platform Versions
Sonicwall Nsa 2650	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sonicwall Nsa 2700 Firmware	Before 7.0.1

Running on/with	Platform Versions
Sonicwall Nsa 2700	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sonicwall Nsa 3650 Firmware	Before 7.0.1

Running on/with	Platform Versions
Sonicwall Nsa 3650	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sonicwall Nsa 3700 Firmware	Before 7.0.1

Running on/with	Platform Versions
Sonicwall Nsa 3700	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sonicwall Nsa 4650 Firmware	Before 7.0.1

Running on/with	Platform Versions
Sonicwall Nsa 4650	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sonicwall Nsa 4700 Firmware	Before 7.0.1

Running on/with	Platform Versions
Sonicwall Nsa 4700	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sonicwall Nsa 5650 Firmware	Before 7.0.1

Running on/with	Platform Versions
Sonicwall Nsa 5650	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sonicwall Nsa 5700 Firmware	Before 7.0.1

Running on/with	Platform Versions
Sonicwall Nsa 5700	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sonicwall Nsa 6650 Firmware	Before 7.0.1

Running on/with	Platform Versions
Sonicwall Nsa 6650	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sonicwall Nsa 6700 Firmware	Before 7.0.1

Running on/with	Platform Versions
Sonicwall Nsa 6700	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sonicwall Nsa 9250 Firmware	Before 7.0.1

Running on/with	Platform Versions
Sonicwall Nsa 9250	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sonicwall Nsa 9450 Firmware	Before 7.0.1

Running on/with	Platform Versions
Sonicwall Nsa 9450	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sonicwall Nsa 9650 Firmware	Before 7.0.1

Running on/with	Platform Versions
Sonicwall Nsa 9650	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sonicwall Tz500w Firmware	Before 7.0.1

Running on/with	Platform Versions
Sonicwall Tz500w	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sonicwall Tz570 Firmware	Before 7.0.1

Running on/with	Platform Versions
Sonicwall Tz570	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sonicwall Tz570p Firmware	Before 7.0.1

Running on/with	Platform Versions
Sonicwall Tz570p	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sonicwall Tz570w Firmware	Before 7.0.1

Running on/with	Platform Versions
Sonicwall Tz570w	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sonicwall Tz600 Firmware	Before 7.0.1

Running on/with	Platform Versions
Sonicwall Tz600	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sonicwall Tz600p Firmware	Before 7.0.1

Running on/with	Platform Versions
Sonicwall Tz600p	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sonicwall Tz670 Firmware	Before 7.0.1

Running on/with	Platform Versions
Sonicwall Tz670	All versions

Related CWEs

CWE-770

Allocation of Resources Without Limits or Throttling

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

References (2)

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0004

Source: PSIRT@sonicwall.com

Vendor Advisory

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0004

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.