Dashboard / CVE-2022-22274

CVE-2022-22274

CRITICAL 3 PoCs
ACT NOW Priority: 7.40 BB Relevance: 100/100
Published: 2022-03-25 Modified: 2026-11-09 First seen: 2026-11-09 Status: active

Attack Surface

Network Low Complexity No Auth No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Network
AC: Low
PR: None
UI: None
S: Unchanged
C: High
I: High
A: High

Description

A Stack-based buffer overflow vulnerability in the SonicOS via HTTP request allows a remote unauthenticated attacker to cause Denial of Service (DoS) or potentially results in code execution in the firewall.

Weakness Classification (2)

Affected Software (2)

VendorProductVersion
sonicwall sonicos < 7.0.1-5050
sonicwall sonicosv < 6.5.4.4-44v-21-1452

References & Advisories (1)

Proof of Concept (3)

★ 18
https://github.com/BishopFox/CVE-2022-22274_CVE-2023-0656
nomi-sec
★ 6
https://github.com/4lucardSec/Sonic_CVE-2022-22274_poc
nomi-sec
—
https://github.com/forthisvideo/CVE-2022-22274_poc
nomi-sec

Bug Bounty Relevance

100 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity
✓ No user interaction
✓ PoC available (3)
✓ High exploitation probability

CVSS Score

9.8 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploitation Probability

75.52%
Raw Score 0.755210
Percentile 99.5%
Date 2026-11-13

EPSS Trend

2026-11-13
0.75521
2026-11-12
0.75521
2026-11-10
0.75521
2026-11-09
0.75521

Intelligence Sources

nvd ref →

External Links