CVE-2022-2323: SonicWall SWS12-10fpoe Firmware

High severity, CVSS 8.8. EPSS: 6.2% chance of exploitation in the next 30 days.

Improper neutralization of special elements used in a user input allows an authenticated malicious user to perform remote code execution in the host system. This vulnerability impacts SonicWall Switch 1.1.1.0-2s and earlier versions

Affected products

• SonicWall SWS12-10fpoe Firmware: before 1.2.0.0-3 (fixed in 1.2.0.0-3)
• SonicWall SWS12-8 Firmware: before 1.2.0.0-3 (fixed in 1.2.0.0-3)
• SonicWall SWS12-8poe Firmware: before 1.2.0.0-3 (fixed in 1.2.0.0-3)
• SonicWall SWS14-24 Firmware: before 1.2.0.0-3 (fixed in 1.2.0.0-3)
• SonicWall SWS14-24fpoe Firmware: before 1.2.0.0-3 (fixed in 1.2.0.0-3)
• SonicWall SWS14-48 Firmware: before 1.2.0.0-3 (fixed in 1.2.0.0-3)
• SonicWall SWS14-48fpoe Firmware: before 1.2.0.0-3 (fixed in 1.2.0.0-3)

Published 2022-07-29. Last modified 2026-06-17.