CVE-2022-2323CWE-77

Improper neutralization of special elements used in a user input allows an authenticated malicious user to perform remote code execution in the host system

published July 29, 2022

CVSS
—
EPSS
6%
Percentile
93.6
In the wild
Unconfirmed
What it is

Improper neutralization of special elements used in a user input allows an authenticated malicious user to perform remote code execution in the host system. This vulnerability impacts SonicWall Switch 1.1.1.0-2s and earlier versions

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06362 · 93.6th percentile
Weakness
CWE-77 · Improper Neutralization of Special Elements used in a Command ('Command Injection')
Published
2022-07-29T19:15Z
EPSS history
Timeline
  • 29 JUL 19:15Z
    Improper neutralization of special elements used in a user input allows an authenticated malicious user to perform remote code execution in the host system
    cvelistv5