VULNERABILITY INTELLIGENCE
CVE-2022-2324
CVSS score7.5 HIGH
EPSS probability0.64%
CISA KEVNot currently listed
Published2022-07-29
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Description
Improperly Implemented Security Check vulnerability in the SonicWall Hosted Email Security leads to bypass of Capture ATP security service in the appliance. This vulnerability impacts 10.0.17.7319 and earlier versions
Weakness classification
- PSIRT@sonicwall.com: CWE-358
- nvd@nist.gov: CWE-290
Primary references
- PSIRT@sonicwall.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory