CVE-2022-2915
published 2022-08-26CVE-2022-2915: A Heap-based Buffer Overflow vulnerability in the SonicWall SMA100 appliance allows a remote authenticated attacker to cause Denial of Service (DoS) on the…
PriorityP274high8.8CVSS 3.1
AVNACLPRLUINSUCHIHAH
ITWVulnCheck KEV
Exploited in the wild
EPSS
1.36%
68.2th percentile
A Heap-based Buffer Overflow vulnerability in the SonicWall SMA100 appliance allows a remote authenticated attacker to cause Denial of Service (DoS) on the appliance or potentially lead to code execution. This vulnerability impacts 10.2.1.5-34sv and earlier versions.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| sonicwall | sma | — | — |
| sonicwall | sma100 | — | — |
| sonicwall | sma_200_firmware | <= 10.2.1.5-34sv | — |
| sonicwall | sma_210_firmware | <= 10.2.1.5-34sv | — |
| sonicwall | sma_400_firmware | <= 10.2.1.5-34sv | — |
| sonicwall | sma_410_firmware | <= 10.2.1.5-34sv | — |
| sonicwall | sma_500v_firmware | <= 10.2.1.5-34sv | — |
Detection & IOCsextracted from sources · hover to see the quote
- ·Vulnerability affects SonicWall SMA100 appliances running firmware version 10.2.1.5-34sv and earlier; patch to a version newer than 10.2.1.5-34sv to remediate. ↗
- ·Exploitation requires the attacker to be remotely authenticated, reducing but not eliminating attack surface; monitor for authenticated sessions from unexpected sources. ↗
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
vulncheck8.8HIGH
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
SonicWall
CVE-2022-2915: A Heap-based Buffer Overflow vulnerability in the SonicWall SMA100 appliance allows a remote authenticated attacker to cause Denial of Service (DoS) o
vendor_sonicwall·2022-08-26·CVSS 8.8
CVE-2022-2915 [HIGH] CWE-122 CVE-2022-2915: A Heap-based Buffer Overflow vulnerability in the SonicWall SMA100 appliance allows a remote authenticated attacker to cause Denial of Service (DoS) o
CVE-2022-2915: A Heap-based Buffer Overflow vulnerability in the SonicWall SMA100 appliance allows a remote authenticated attacker to cause Denial of Service (DoS) on the appliance or potentially lead to code execution. This vulnerability impacts 10.2.1.5-34sv and earlier versions.
GHSA
GHSA-44v4-vjm7-8fmf: A Heap-based Buffer Overflow vulnerability in the SonicWall SMA100 appliance allows a remote authenticated attacker to cause Denial of Service (DoS) o
ghsa_unreviewed·2022-08-27
CVE-2022-2915 [HIGH] CWE-787 GHSA-44v4-vjm7-8fmf: A Heap-based Buffer Overflow vulnerability in the SonicWall SMA100 appliance allows a remote authenticated attacker to cause Denial of Service (DoS) o
A Heap-based Buffer Overflow vulnerability in the SonicWall SMA100 appliance allows a remote authenticated attacker to cause Denial of Service (DoS) on the appliance or potentially lead to code execution. This vulnerability impacts 10.2.1.5-34sv and earlier versions.
VulnCheck
SonicWall sma_200_firmware Heap-based Buffer Overflow
vulncheck·2022·CVSS 8.8
CVE-2022-2915 [HIGH] SonicWall sma_200_firmware Heap-based Buffer Overflow
SonicWall sma_200_firmware Heap-based Buffer Overflow
A Heap-based Buffer Overflow vulnerability in the SonicWall SMA100 appliance allows a remote authenticated attacker to cause Denial of Service (DoS) on the appliance or potentially lead to code execution. This vulnerability impacts 10.2.1.5-34sv and earlier versions.
Affected: SonicWall sma_200_firmware
Required Action: Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
Exploitation References: https://3354902.hs-sites.com/hubfs/Consulting/TTP%20Briefing/Cybereason_TTP_Briefing_Q3-2025.pdf
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-08-26
Published
Exploited in the wild