CVE-2022-22281 - A buffer overflow vulnerability in the SonicWall SSL-VPN NetExtender Windows Client (32 and 64 bit) in 10.2.322 and earlier versions, allows an attacker to potentially execute arbitrary code in the host windows operating system

Back Back to CVE browser

HIGH

A buffer overflow vulnerability in the SonicWall SSL-VPN NetExtender Windows Client (32 and 64 bit) in 10.2.322 and earlier versions, allows an attacker to potentially execute arbitrary code in the host windows operating system

Published May 13, 2022

7.8

HIGH

CVSS 3.1

EPSS 0.51%

Description

A buffer overflow vulnerability in the SonicWall SSL-VPN NetExtender Windows Client (32 and 64 bit) in 10.2.322 and earlier versions, allows an attacker to potentially execute arbitrary code in the host windows operating system.

Affected products

Vendor SonicWall Product SonicWall NetExtender Windows (32 and 64 bit) Client Default
unknown
Affected
- 10.2.322 and earlier versions

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
SonicWall	SonicWall NetExtender Windows (32 and 64 bit) Client	unknown	Affected 10.2.322 and earlier versions

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-120

Classic Buffer Overflow

CWE-121

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-27428
Advisory
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0008
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-27428		Advisory
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0008		x_refsource_CONFIRMVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner sonicwall

Published May 13, 2022

Updated Aug 3, 2024

Reserved Dec 29, 2021

Link CVE-2022-22281

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-22281

Red Hat

No data

ENISA EUVD

Assigner sonicwall

Published May 13, 2022

Updated Aug 3, 2024

Link EUVD-2022-27428

GitHub

No data