CVE-2022-1703
HIGH EXPLOITEDSonicWall SMA 210/410/500v Firmware < 10.2.1.4-31sv - Authenticated OS Command Injection
Title source: llmExploitation Summary
CVE-2022-1703 has been observed exploited in the wild (reported by VulnCheck KEV).
Description
Improper neutralization of special elements in the SonicWall SSL-VPN SMA100 series management interface allows a remote authenticated attacker to inject OS Commands which potentially leads to remote command execution vulnerability or denial of service (DoS) attack.
References (1)
Core 1
Core References
Vendor Advisory x_refsource_confirm
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0010
Scores
CVSS v3
8.8
EPSS
0.0408
EPSS Percentile
88.7%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
VulnCheck KEV
2025-10-23
CWE
CWE-78
Status
published
Products (3)
sonicwall/sma_210_firmware
< 10.2.1.4-31sv
sonicwall/sma_410_firmware
< 10.2.1.4-31sv
sonicwall/sma_500v_firmware
< 10.2.1.4-31sv
Published
Jun 08, 2022
Tracked Since
Feb 18, 2026