What is CVE-2022-2324?

CVE-2022-2324 is a high-severity vulnerability in Sonicwall Hosted_email_security, classified under CWE-358. CVSS score: 7.5/10. Published 2022-07-29.

How severe is CVE-2022-2324?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Sonicwall Hosted_email_security

CVE-2022-2324

Improperly Implemented Security Check vulnerability in the SonicWall Hosted Email Security leads to bypass of Capture ATP security service in the appliance. This vulnerability impacts 10.0.17.7319 and earlier versions

EPSS: 0.006 (42.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N.

Affected products

Sonicwall Hosted_email_security
Sonicwall Email Security — versions 10.0.17.7319 and earlier

Weakness classification (CWE)

CWE-358
CWE-290 — Authentication Bypass by Spoofing

References

PSIRT@sonicwall.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2022-2324?: CVE-2022-2324 is a high-severity vulnerability in Sonicwall Hosted_email_security, classified under CWE-358. CVSS score: 7.5/10. Published 2022-07-29.
How severe is CVE-2022-2324?: High severity. CVSS v3 base score is 7.5 out of 10.