Lucene search
HistorySep 23, 2022 - 1:15 p.m.
CVE-2022-3236
code injection
sophos firewall
remote attacker
execute code
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.128 Low
EPSS
Percentile
95.5%
A code injection vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v19.0 MR1 and older.
Affected configurations
Node
sophosfirewallRange≤19.0.1
Related
githubexploit
githubexploit
Exploit for Injection in Sophos Firewall
2022-12-11 18:16:53
Exploit for Injection in Sophos Firewall
2022-10-15 12:43:46
Exploit for Injection in Sophos Firewall
2022-11-25 18:43:37
cvelist
cvelist
CVE-2022-3236
2022-09-23 12:50:13
cisa_kev
cisa_kev
Sophos Firewall Code Injection Vulnerability
2022-09-23 00:00:00
nessus
nessus
Sophos XG Firewall <= 19.0.1 RCE
2022-11-23 00:00:00
cnvd
cnvd
Sophos Firewall code execution vulnerability
2022-09-28 00:00:00
hivepro
hivepro
Sophos Zero-day vulnerability becomes target for attackers
2022-09-30 10:12:52
prion
prion
Code injection
2022-09-23 13:15:00
cve
cve
CVE-2022-3236
2022-09-23 13:15:10
attackerkb
attackerkb
CVE-2022-3236
2022-09-23 00:00:00
CVE-2022-1040
2022-03-25 00:00:00
qualysblog
qualysblog
thn
thn
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.128 Low
EPSS
Percentile
95.5%
Related for NVD:CVE-2022-3236