CVE:CVE-2022-2915
CNNVD:CNNVD-202208-4247
SonicWALL SMA100是美国SonicWALL公司的一款安全访问网关设备。
SonicWALL SMA100 10.2.1.5-34sv及之前存在缓冲区错误漏洞，该漏洞源于远程身份验证攻击者利用基于堆的缓冲区溢出造成拒绝服务或代码执行。
solution:Upgrade sonicwall sma_200_firmware to a higher version than 10.2.1.5-34sv,and avoid the version (,10.2.1.5-34sv]; Upgrade sonicwall sma_210_firmware to a higher version than 10.2.1.5-34sv,and avoid the version (,10.2.1.5-34sv]; Upgrade sonicwall sma_400_firmware to a higher version than 10.2.1.5-34sv,and avoid the version (,10.2.1.5-34sv]; Upgrade sonicwall sma_410_firmware to a higher version than 10.2.1.5-34sv,and avoid the version (,10.2.1.5-34sv]; Upgrade sonicwall sma_500v_firmware to a higher version than 10.2.1.5-34sv,and avoid the version (,10.2.1.5-34sv]