Sonicwall Tz300W vulnerabilities

4 vulnerabilities

Known vulnerabilities in Sonicwall Tz300W, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.5CVE-2022-47522sonicwallsoho_250_firmware+28
EPSS score
0.89%
The IEEE 802.11 specifications through 802.11ax allow physically proximate attackers to intercept (possibly cleartext) target-destined frames by spoofing a target's MAC address, sending Power Save frames to the access point, and then sending other frames to the access point (such as authentication frames or re-association frames) to remove the target's original security context. This behavior occurs because the specifications do not require an access point to purge its transmit queue before removing a client's pairwise encryption key.5.3CVE-2022-22276sonicwallnsa_2650_firmware+49
EPSS score
0.79%
A vulnerability in SonicOS SNMP service resulting exposure of sensitive information to an unauthorized user.7.5CVE-2022-22278sonicwallnsa_2650_firmware+49
EPSS score
0.96%
A vulnerability in SonicOS CFS (Content filtering service) returns a large 403 forbidden HTTP response message to the source address when users try to access prohibited resource this allows an attacker to cause HTTP Denial of Service (DoS) attack5.3CVE-2022-22277sonicwallnsa_2650_firmware+49
EPSS score
0.79%
A vulnerability in SonicOS SNMP service resulting exposure of Wireless Access Point sensitive information in cleartext.