RequirementsĭELL Sonicwall firewalls require HotFix firmware SonicOS 5.8.1.15o HotFix 152075 or later Please note that we cannot assist you in the configuration of your firewall. This guide is written for Sonicwalls that are configured as Many-to-One NAT. SonicWall expects an official firmware release with the required patches for NSsp15700 to be available in mid-April 2022.This document describes the configuration of Dell Sonicwall devices based on an TZ100, TZ100W, TZ105, TZ105W, TZ200, TZ200W, TZ205, TZ205W, TZ210, TZ 210W, TZ215, TZ 215W, NSA 220, NSA 220W, NSA 240, NSA 2400, NSA 3500, NSA 4500, NSA 5000, NSA E5500, NSA E6500, NSA E7500, NSA E8500, NSA E8510 for the use with 3CX Phone System. Or, one can contact SonicWall's support team for a hotfix firmware (7.0.1-5030-HF-R844). However, there is no update for the NSsp 15700 yet, administrators should continue with SonicWall's suggested measures (see also this article) to temporarily mitigate CVE-2022-22274 to avoid exploitation. The vendor offers firmware updates for affected products to close the vulnerability, according to this advisory.

SonicWall strongly advises organizations using the affected SonicWall firewalls listed in this SonicWall document to follow the guidance provided. Also, no PoC reports have been published and malicious exploitation of this vulnerability has not been reported to SonicWall, the Maadvisory states.

SonicWall PSIRT is not aware of any active exploitation of the vulnerability. This vulnerability only affects the web management interface, the SonicOS SSLVPN interface is not affected. The vulnerability has received a CVE score of 9.4 and is therefore considered critical. It is a stack buffer overflow that allows a remote attacker to cause a Denial of Service (DoS) attack via HTTP requests or possibly execute code in the firewall. The vulnerability CVE-2022-22274 was found in SonicOS – as you can read on the linked page. I came across this issue a few days ago via the following tweet, which is explained by the colleagues at Bleeping Computer here.

Sonicfirewall