CVE-2022-1040 - An authentication bypass vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v18.5 MR3 and older

Back Back to CVE browser

CRITICAL KEV

An authentication bypass vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v18.5 MR3 and older

Published Mar 25, 2022 ·Due Apr 21, 2022

9.8

CRITICAL

CVSS 3.1

EPSS 99.80%

Description

An authentication bypass vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v18.5 MR3 and older.

Affected products

Vendor Sophos Product Sophos Firewall Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <=18.5 MR3

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Sophos

Sophos Firewall

n/a

Version	Status	Constraints
unspecified	affected	<=18.5 MR3

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (5)

http://packetstormsecurity.com/files/168046/Sophos-XG115w-Firewall-17.0.10-MR-10-Authentication-Bypass.html
x_refsource_MISCExploitThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-24387
Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-1040
government-resourceUS Government Resource
https://www.exploit-db.com/exploits/51006
x_refsource_MISCExploitThird Party AdvisoryVDB Entry
https://www.sophos.com/en-us/security-advisories/sophos-sa-20220325-sfos-rce
x_refsource_CONFIRMMitigationVendor Advisory

Link	Providers	Tags
http://packetstormsecurity.com/files/168046/Sophos-XG115w-Firewall-17.0.10-MR-10-Authentication-Bypass.html		x_refsource_MISCExploitThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-24387		Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-1040		government-resourceUS Government Resource
https://www.exploit-db.com/exploits/51006		x_refsource_MISCExploitThird Party AdvisoryVDB Entry
https://www.sophos.com/en-us/security-advisories/sophos-sa-20220325-sfos-rce		x_refsource_CONFIRMMitigationVendor Advisory