CVE:CVE-2022-1701
CNNVD:CNNVD-202205-3347
SonicWall SMA1000 series是美国SonicWall公司的一系列安全移动访问解决方案。简化了对跨本地、云和混合数据中心托管的企业资源的端到端安全远程访问。
SonicWall SMA1000 系列固件 12.4.0版本、12.4.1-02965版本及之前版本存在安全漏洞，该漏洞源于使用共享的硬编码加密密钥来存储数据。
solution:Upgrade sonicwall sma_6200_firmware to a higher version than 12.4.0,12.4.1,and avoid the version 12.4.0,12.4.1; Upgrade sonicwall sma_6210_firmware to a higher version than 12.4.0,12.4.1,and avoid the version 12.4.0,12.4.1; Upgrade sonicwall sma_7200_firmware to a higher version than 12.4.0,12.4.1,and avoid the version 12.4.0,12.4.1; Upgrade sonicwall sma_7210_firmware to a higher version than 12.4.0,12.4.1,and avoid the version 12.4.0,12.4.1; Upgrade sonicwall sma_8000v_firmware to a higher version than 12.4.0,12.4.1,and avoid the version 12.4.0,12.4.1