CVE-2022-22273: SonicWall SMA 200 Firmware

Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days.

Improper neutralization of Special Elements leading to OS Command Injection vulnerability impacting end-of-life Secure Remote Access (SRA) products and older firmware versions of Secure Mobile Access (SMA) 100 series products, specifically the SRA appliances running all 8.x, 9.0.0.5-19sv and earlier versions and Secure Mobile Access (SMA) 100 series products running older firmware 9.0.0.9-26sv and earlier versions

Affected products

• SonicWall SMA 200 Firmware: up to and including 9.0.0.9-26sv
• SonicWall SMA 210 Firmware: up to and including 9.0.0.9-26sv
• SonicWall SMA 400 Firmware: up to and including 9.0.0.9-26sv
• SonicWall SMA 410 Firmware: up to and including 9.0.0.9-26sv
• SonicWall SMA 500v Firmware: up to and including 9.0.0.9-26sv
• SonicWall SRA 1200 Firmware: up to and including 9.0.0.5-19sv
• SonicWall SRA 1600 Firmware: up to and including 9.0.0.5-19sv
• SonicWall SRA 4200 Firmware: up to and including 9.0.0.5-19sv
• SonicWall SRA 4600 Firmware: up to and including 9.0.0.5-19sv

Published 2022-03-17. Last modified 2026-06-17.