CVE-2022-3236 - A code injection vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v19.0 MR1 and older

Back Back to CVE browser

CRITICAL KEV

A code injection vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v19.0 MR1 and older

Published Sep 23, 2022 ·Due Oct 14, 2022

9.8

CRITICAL

CVSS 3.1

EPSS 98.91%

Description

A code injection vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v19.0 MR1 and older.

Affected products

Vendor Sophos Product Sophos Firewall Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <=18.5 MR4
- Version
  unspecified
  Status
  affected
  Constraints
  <=19.0 MR1

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Sophos

Sophos Firewall

n/a

Version	Status	Constraints
unspecified	affected	<=18.5 MR4
unspecified	affected	<=19.0 MR1

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-94

Code Injection

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-42644
Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-3236
government-resourceUS Government Resource
https://www.sophos.com/en-us/security-advisories/sophos-sa-20220923-sfos-rce
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-42644		Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-3236		government-resourceUS Government Resource
https://www.sophos.com/en-us/security-advisories/sophos-sa-20220923-sfos-rce		x_refsource_CONFIRMVendor Advisory