Skip to main content
Cyber Retaliator Solutions
Cyber RetaliatorSolutions
All vulnerabilities
CVE-2022-3236

Sophos Firewall Code Injection Vulnerability

Sophos — Firewall

Added to KEV catalog
23 September 2022
Federal remediation due date
14 October 2022
Weakness classification (CWE)
CWE-94

CISA Description

A code injection vulnerability in the User Portal and Webadmin of Sophos Firewall allows for remote code execution.

Required action

Apply updates per vendor instructions.

Notes

https://www.sophos.com/en-us/security-advisories/sophos-sa-20220923-sfos-rce; https://nvd.nist.gov/vuln/detail/CVE-2022-3236

View on NVD View on MITRE CVE View full CISA catalog

More Sophos Vulnerabilities

CVE-2020-15069

Sophos XG Firewall Buffer Overflow Vulnerability

CVE-2020-29574

CyberoamOS (CROS) SQL Injection Vulnerability

CVE-2023-1671

Sophos Web Appliance Command Injection Vulnerability

CVE-2022-1040

Sophos Firewall Authentication Bypass Vulnerability

CVE-2020-25223

Sophos SG UTM Remote Code Execution Vulnerability

Confirm Your Exposure

Is this vulnerability present in your environment?

CRS delivers independent VAPT assessments that identify exactly which known-exploited vulnerabilities exist in your network, applications, and infrastructure.

Explore VAPT Services