CVE:CVE-2022-2323
CNNVD:CNNVD-202207-1405
SonicWALL Switch是美国SonicWALL公司的一个交换机。
SonicWALL Switch 1.2.0.0-3 之前版本存在输入验证错误漏洞，该漏洞源于对用户提供的输入的验证不充分，远程攻击者利用该漏洞可以在设备上执行任意代码。
solution:Upgrade sonicwall sws12-10fpoe_firmware to a higher version than 1.2.0.0-3,and avoid the version (,1.2.0.0-3); Upgrade sonicwall sws12-8_firmware to a higher version than 1.2.0.0-3,and avoid the version (,1.2.0.0-3); Upgrade sonicwall sws12-8poe_firmware to a higher version than 1.2.0.0-3,and avoid the version (,1.2.0.0-3); Upgrade sonicwall sws14-24_firmware to a higher version than 1.2.0.0-3,and avoid the version (,1.2.0.0-3); Upgrade sonicwall sws14-24fpoe_firmware to a higher version than 1.2.0.0-3,and avoid the version (,1.2.0.0-3); Upgrade sonicwall sws14-48_firmware to a higher version than 1.2.0.0-3,and avoid the version (,1.2.0.0-3); Upgrade sonicwall sws14-48fpoe_firmware to a higher version than 1.2.0.0-3,and avoid the version (,1.2.0.0-3)