SonicWall SRA 4600 Firmware vulnerabilities

2 CVEs affecting SonicWall SRA 4600 Firmware, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-22273, published 2022-03-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-20028: SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability, published 2021-08-04. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2022-03-28. EPSS: 30.1% chance of exploitation in the next 30 days. Improper neutralization of a SQL Command leading to SQL Injection vulnerability impacting end-of-life Secure Remote Access (SRA) products, specifically the SRA appliances running all 8.x firmware and…
CVE-2022-22273, published 2022-03-17. Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days. Improper neutralization of Special Elements leading to OS Command Injection vulnerability impacting end-of-life Secure Remote Access (SRA) products and older firmware versions of Secure Mobile Access…