What is the CVSS score of CVE-2022-1701?

CVE-2022-1701 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 4.5%.

Sma 6200 Firmware CVE-2022-1701

HIGH

Use of Hard-coded Cryptographic Key (CWE-321)

2022-05-13 PSIRT@sonicwall.com

Sonicwall Information Disclosure Sma 6200 Firmware Sma 6210 Firmware Sma 7200 Firmware Sma 7210 Firmware Sma 8000V Firmware

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

CVE Published

May 13, 2022 - 20:15 nvd

HIGH 7.5

DescriptionNVD

SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions uses a shared and hard-coded encryption key to store data.

AnalysisAI

SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions uses a shared and hard-coded encryption key to store data. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-321. SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions uses a shared and hard-coded encryption key to store data. Affected products include: Sonicwall Sma 6200 Firmware, Sonicwall Sma 6210 Firmware, Sonicwall Sma 7200 Firmware, Sonicwall Sma 7210 Firmware, Sonicwall Sma 8000V Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.