SonicWall has addressed a critical SQL injection flaw in its Analytics On-Prem and Global Management System offerings, which could be exploited to prompt unauthenticated SQL injection, according to The Hacker News.
The vulnerability, tracked as CVE-2022-22280, was identified and reported by DBappSecurity HAT Lab researchers H4lo and Catalpa in Analytics On-Prem 2.5.0.3-2520 and earlier versions, as well as GMS versions 9.3.1-SP2-Hotfix1 and earlier.
MITRE had noted that SQL injection vulnerabilities could be leveraged to modify query logic for security check evasion, as well as back-end database modification to prompt system command execution.
"Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data," MITRE said.
SonicWall noted that the vulnerability does not have any workaround.
"However, the likelihood of exploitation may be significantly reduced by incorporating a Web Application Firewall (WAF) to block SQLi attempts," said SonicWall, which urged organizations to apply the Analytics 2.5.0.3-2520-Hotfix1 and GMS 9.3.1-SP2-Hotfix-2 updates.
Included in the exposed dataset labeled "PDL" were individuals' full names, email addresses, phone numbers, location data, professional summaries, and skills, as well as education and employment histories.
Attackers could leverage the issue — which impacts Nexus 3000, 7000, and 9000 series switches with vulnerable NX-OS versions with DHCPv6 activated and are in standalone NX-OS mode — to facilitate continuous crashes of the dhcp_snoop process and a denial-of-service condition.
Higher rewards of up to $250,000 will be given by Google for the discovery of memory corruption flaws in the Chrome browser shown to achieve remote code execution using a non-sandboxed process as part of a more robust vulnerability reward program.