CVE-2022-22278: SonicWall Nsa 2650 Firmware

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

A vulnerability in SonicOS CFS (Content filtering service) returns a large 403 forbidden HTTP response message to the source address when users try to access prohibited resource this allows an attacker to cause HTTP Denial of Service (DoS) attack

Affected products

SonicWall Nsa 2650 Firmware: before 7.0.1 (fixed in 7.0.1)
SonicWall Nsa 2700 Firmware: before 7.0.1 (fixed in 7.0.1)
SonicWall Nsa 3650 Firmware: before 7.0.1 (fixed in 7.0.1)
SonicWall Nsa 3700 Firmware: before 7.0.1 (fixed in 7.0.1)
SonicWall Nsa 4650 Firmware: before 7.0.1 (fixed in 7.0.1)
SonicWall Nsa 4700 Firmware: before 7.0.1 (fixed in 7.0.1)
SonicWall Nsa 5650 Firmware: before 7.0.1 (fixed in 7.0.1)
SonicWall Nsa 5700 Firmware: before 7.0.1 (fixed in 7.0.1)
SonicWall Nsa 6650 Firmware: before 7.0.1 (fixed in 7.0.1)
SonicWall Nsa 6700 Firmware: before 7.0.1 (fixed in 7.0.1)
SonicWall Nsa 9250 Firmware: before 7.0.1 (fixed in 7.0.1)
SonicWall Nsa 9450 Firmware: before 7.0.1 (fixed in 7.0.1)
SonicWall Nsa 9650 Firmware: before 7.0.1 (fixed in 7.0.1)
SonicWall Nssp 10700 Firmware: before 7.0.1.0 (fixed in 7.0.1.0)
SonicWall Nssp 11700 Firmware: before 7.0.1.0 (fixed in 7.0.1.0)
SonicWall Nssp 12400 Firmware: before 7.0.1.0 (fixed in 7.0.1.0)
SonicWall Nssp 12800 Firmware: before 7.0.1.0 (fixed in 7.0.1.0)
SonicWall Nssp 13700 Firmware: before 7.0.1.0 (fixed in 7.0.1.0)
SonicWall Nssp 15700 Firmware: before 7.0.1.0 (fixed in 7.0.1.0)
SonicWall Nsv 100 Firmware: before 7.0.1.0 (fixed in 7.0.1.0)
SonicWall Nsv 10 Firmware: before 7.0.1.0 (fixed in 7.0.1.0)
SonicWall Nsv 1600 Firmware: before 7.0.1.0 (fixed in 7.0.1.0)
SonicWall Nsv 200 Firmware: before 7.0.1.0 (fixed in 7.0.1.0)
SonicWall Nsv 25 Firmware: before 7.0.1.0 (fixed in 7.0.1.0)
SonicWall Nsv 270 Firmware: before 7.0.1.0 (fixed in 7.0.1.0)
and 24 more

Published 2022-04-27. Last modified 2026-06-17.