CVE:CVE-2022-22282
CNNVD:CNNVD-202205-3343
SonicWALL SMA1000 series是美国SonicWALL公司的一系列安全移动访问解决方案。简化了对跨本地、云和混合数据中心托管的企业资源的端到端安全远程访问。
SonicWall SMA1000 系列固件 12.4.0、12.4.1-02965 及之前版本存在安全漏洞，该漏洞源于错误地限制了对资源的访问，从而导致不正确的访问控制问题。
solution:Upgrade sonicwall sma_6200_firmware to a higher version than 12.4.0,12.4.1,and avoid the version 12.4.0,12.4.1; Upgrade sonicwall sma_6210_firmware to a higher version than 12.4.0,12.4.1,and avoid the version 12.4.0,12.4.1; Upgrade sonicwall sma_7200_firmware to a higher version than 12.4.0,12.4.1,and avoid the version 12.4.0,12.4.1; Upgrade sonicwall sma_7210_firmware to a higher version than 12.4.0,12.4.1,and avoid the version 12.4.0,12.4.1; Upgrade sonicwall sma_8000v_firmware to a higher version than 12.4.0,12.4.1,and avoid the version 12.4.0,12.4.1