CVE-2022-22274: SonicWall SonicOS

Critical severity, CVSS 9.8. EPSS: 75.5% chance of exploitation in the next 30 days.

A Stack-based buffer overflow vulnerability in the SonicOS via HTTP request allows a remote unauthenticated attacker to cause Denial of Service (DoS) or potentially results in code execution in the firewall.

Affected products

• SonicWall SonicOS: up to and including 7.0.1-5050; up to and including 7.0.1-r579
• SonicWall Sonicosv: up to and including 6.5.4.4-44v-21-1452

Published 2022-03-25. Last modified 2026-06-17.