CVE-2022-22282: SonicWall SMA 6200 Firmware

Critical severity, CVSS 9.8. EPSS: 7.8% chance of exploitation in the next 30 days.

SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions incorrectly restricts access to a resource using HTTP connections from an unauthorized actor leading to Improper Access Control vulnerability.

Affected products

• SonicWall SMA 6200 Firmware: version 12.4.0 only; version 12.4.1 only
• SonicWall SMA 6210 Firmware: version 12.4.0 only; version 12.4.1 only
• SonicWall SMA 7200 Firmware: version 12.4.0 only; version 12.4.1 only
• SonicWall SMA 7210 Firmware: version 12.4.0 only; version 12.4.1 only
• SonicWall SMA 8000v Firmware: version 12.4.0 only; version 12.4.1 only

Published 2022-05-13. Last modified 2026-06-17.