PT-2022-15915 · Sonicwall · Sonicwall Hosted Email Security

Published 2022-07-29 · Updated 2025-10-31 · CVE-2022-2324

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions SonicWall Hosted Email Security versions prior to 10.0.17.7319

Description The issue is related to an improperly implemented security check in the SonicWall Hosted Email Security, which allows for the bypass of the Capture ATP security service in the appliance.

Recommendations For versions prior to 10.0.17.7319, update to version 10.0.17.7319 or later to resolve the issue.

Fix

Improperly Implemented Security Check for Standard

Authentication Bypass by Spoofing

Weakness Enumeration

CWE-358

CWE-290

Related Identifiers

CVE-2022-2324

Affected Products

Sonicwall Hosted Email Security

References · 5

• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0014 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-2324 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-2324 · Security Note
• https://t.me/cveNotify/141132 · Telegram Post
• https://t.me/cibsecurity/47300 · Telegram Post