CVE-2022-3236

CVSS 9.8 CRITICALEPSS 98.9%● KEVCWE-94

In short

A code injection flaw in Sophos Firewall lets a remote attacker run arbitrary code on affected systems without needing to log in. This is a critical vulnerability because it gives attackers full control of the firewall.

Technical detail

CWE-94 code injection vulnerability in User Portal and Webadmin components allows unauthenticated remote code execution on Sophos Firewall v19.0 MR1 and earlier. The attack vector is network-based with no authentication required, resulting in complete system compromise.

Summary generated and translated by AI from the official description.

A code injection vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v19.0 MR1 and older.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Sophos · Sophos Firewall

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-3236 https://www.sophos.com/en-us/security-advisories/sophos-sa-20220923-sfos-rce