SonicWall Releases Security Update

Security updates for SonicWall products address two vulnerabilities rated as Critical and two rated as High

Threat ID:: CC-4137
Threat Severity:: Information only
Published:: 25 July 2022 1:06 PM

Report a cyber attack: call 0300 303 5222 or email [email protected]

Summary

Security updates for SonicWall products address two vulnerabilities rated as Critical and two rated as High

Affected platforms

The following platforms are known to be affected:

Versions: SMA 210/410, SMA 500v (ESX, KVM, Hyper-V, AWS, Azure)

Sonicwall Secure Mobile Access (SMA) 100 Series Appliances

Versions: SonicOS Gen6, SonicOS Gen7

SonicWall SonicOS

Versions: SMA 6200/7200/6210/7210, SMA 8200v (ESX, KVM, Hyper-V, AWS, Azure)

SonicWall Secure Mobile Access (SMA) 1000 Series

The following platforms are also known to be affected:

SonicWall Global Management System (GMS)- 9.3.1-SP2-Hotfix1 and earlier versions
SonicWall Analytics - 2.5.0.3-2520 and earlier versions
SonicWall Switch version 1.1.1.0-2s and earlier versions
SonicWall Hosted Email Security 10.0.17.7319 and earlier versions
SonicWall Network Security Manager (NSM)
SonicWall Capture Security Appliance
SonicWall Capture Client
SonicWall Email Security 10.0.17 and earlier versions are using OpenSSL 1.1.1n
SonicWall NetExtender Client
SonicWall Connect Tunnel Client
SonicWave Access Points

Threat details

Introduction

SonicWall has released security advisories to address vulnerabilities in multiple products, with two vulnerabilities rated as Critical and two vulnerabilities rated as High. The critical vulnerabilities address an unauthenticated SQL injection in SonicWall GMS and Analytics and an arbitrary code execution.

An unauthenticated remote attacker, could exploit some of these vulnerabilities to take control of a system.

Remediation advice

Affected organisations are encouraged to review the SonicWall security advisories and apply the necessary updates.

Remediation steps

Type	Step
Patch	SNWLID-2022-0007 - Unauthenticated SQL Injection in SonicWall GMS and Analytics https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0007
Patch	SNWLID-2022-0011 - OpenSSL c_rehash script allows command injection CVE-2022-1292 https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0011
Patch	SNWLID-2022-0013 - SonicWall Switch Post-Authenticated Remote Code Execution https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0013
Patch	SNWLID-2022-0014 - SonicWall Hosted Email Security Capture ATP Bypass https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0014

Definitive source of threat updates

https://psirt.global.sonicwall.com/vuln-list

CVE Vulnerabilities

Status Reserved

CVE-2022-22280

Status Published

CVE-2022-1292

The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2). Fixed in OpenSSL 1.1.1o (Affected 1.1.1-1.1.1n). Fixed in OpenSSL 1.0.2ze (Affected 1.0.2-1.0.2zd).

Status Reserved

CVE-2022-2323

Status Reserved

CVE-2022-2324

Last edited: 25 July 2022 2:24 pm