CVE-2022-1701 — Use of Hard-coded Cryptographic Key in Sma1000

CWE-321 — Use of Hard-coded Cryptographic KeyCWE-798 — Hard-coded CredentialsCWE-264CWE-770 — Allocation of Resources Without Limits or Throttling8 documents8 sources
Severity
7.5HIGHNVD
CISA7.8
EPSS
0.2%
top 64.33%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
Sonicwall Sma1000Sonicwall SMA 6200 FirmwareSonicwall SMA 6210 Firmware+3 more
Timeline
PublishedMay 13
Latest updateDec 24

Description

SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions uses a shared and hard-coded encryption key to store data.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages6 packages

▶CVEListV5sonicwall/sonicwall_sma100012.4.0, 12.4.1+1
▶NVDsonicwall/sma_6200_firmware12.4.0, 12.4.1+1
▶NVDsonicwall/sma_6210_firmware12.4.0, 12.4.1+1
▶NVDsonicwall/sma_7200_firmware12.4.0, 12.4.1+1
▶NVDsonicwall/sma_7210_firmware12.4.0, 12.4.1+1

🔴Vulnerability Details

3
OSV
orangefs: Fix kmemleak in orangefs_prepare_debugfs_help_string()↗2025-12-24
▶
GHSA
GHSA-rxgp-8c89-84pf: SonicWall SMA1000 series firmware 12↗2022-05-14
▶
CVEList
CVE-2022-1701: SonicWall SMA1000 series firmware 12↗2022-05-13
▶

📋Vendor Advisories

3
Red Hat
kernel: orangefs: Fix kmemleak in orangefs_prepare_debugfs_help_string()↗2025-12-24
▶
Juniper
CVE-2022-22211: A limitless resource allocation vulnerability in FPC resources of Juniper Networks Junos OS Evolved on PTX Series allows an unprivileged attacker to c↗2022-10-18
▶
CISA
Microsoft Win32k Privilege Escalation Vulnerability↗2022-03-03
▶
CVE-2022-1701 — Use of Hard-coded Cryptographic Key | cvebase