CVE:CVE-2022-22279
CNNVD:CNNVD-202204-3327
SonicWALL SSLVPN是美国SonicWALL公司的一个适用于 Windows 和 Linux 用户的透明软件应用程序。使远程用户能够安全地连接到公司网络。
SonicWall SSLVPN 存在路径遍历漏洞，经过身份验证的攻击者可以读取任意文件。
solution:Upgrade sonicwall sra_1200_firmware to a higher version than 9.0.0.5-19sv,and avoid the version (,9.0.0.5-19sv]; Upgrade sonicwall sra_4200_firmware to a higher version than 9.0.0.5-19sv,and avoid the version (,9.0.0.5-19sv]; Upgrade sonicwall sma_210_firmware to a higher version than 9.0.0.10-28sv,and avoid the version (,9.0.0.10-28sv); Upgrade sonicwall sma_410_firmware to a higher version than 9.0.0.10-28sv,and avoid the version (,9.0.0.10-28sv); Upgrade sonicwall sma_500v_firmware to a higher version than 9.0.0.10-28sv,and avoid the version (,9.0.0.10-28sv)