CVE-2022-22274
CRITICAL EXPLOITEDSonicOS < 7.0.1-5050 and SonicOSv < 6.5.4.4-44v-21-1452 - Unauthenticated Stack-based Buffer Overflow via HTTP Request
Title source: llmExploitation Summary
CVE-2022-22274 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 4 public exploits from researchers including BishopFox, 4lucardSec, forthisvideo.
AI-analyzed exploit summary This repository contains a proof-of-concept script for CVE-2022-22274 and CVE-2023-0656, which are stack-based buffer overflow vulnerabilities in SonicWall NGFW. The script tests for vulnerability and can trigger a denial-of-service (DoS) by sending maliciously crafted HTTP requests with long URI paths.
Description
A Stack-based buffer overflow vulnerability in the SonicOS via HTTP request allows a remote unauthenticated attacker to cause Denial of Service (DoS) or potentially results in code execution in the firewall.
Exploits (4)
This repository contains a proof-of-concept script for CVE-2022-22274 and CVE-2023-0656, which are stack-based buffer overflow vulnerabilities in SonicWall NGFW. The script tests for vulnerability and can trigger a denial-of-service (DoS) by sending maliciously crafted HTTP requests with long URI paths.
This PoC exploits CVE-2022-22274 by sending a crafted packet to a vulnerable server, likely targeting a buffer overflow or memory corruption vulnerability. The exploit constructs a malicious packet with specific patterns and sends it via a TCP socket.
This PoC exploits CVE-2022-22274 by sending a crafted packet with a base64-encoded payload to a vulnerable server. The payload consists of structured binary data (0x41414141, 0x42424242, 0x43434343) likely targeting a memory corruption or buffer overflow vulnerability.
The repository contains a functional Python PoC for CVE-2022-22274, which exploits a buffer overflow vulnerability in SonicWall SMA100 devices. The script constructs a malicious packet with specific patterns (0x41414141, 0x42424242, 0x43434343) and sends it to a target server, demonstrating the vulnerability.
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H