CVE-2022-47522: sonicwall soho_250_firmware Authentication Bypass by Spoofing

Vulnerability summary

CVE-2022-47522 is a high (CVSS 7.5) Authentication Bypass by Spoofing vulnerability in sonicwall soho_250_firmware. EPSS estimates a 0.89% chance of exploitation in the next 30 days, higher than 58.6% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 15-04-2023
   PublishedVulnerability first disclosed.
2. 06-02-2025
   Last modifiedVulnerability information updated.

Description

The IEEE 802.11 specifications through 802.11ax allow physically proximate attackers to intercept (possibly cleartext) target-destined frames by spoofing a target's MAC address, sending Power Save frames to the access point, and then sending other frames to the access point (such as authentication frames or re-association frames) to remove the target's original security context. This behavior occurs because the specifications do not require an access point to purge its transmit queue before removing a client's pairwise encryption key.

• CWE-290Authentication Bypass by SpoofingThis attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.