CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2022-03-25
Sophos Firewall User Portal and Webadmin Authentication Bypass Leading to RCE (CVE-2022-1040)
[Affected Scope] Sophos Firewall v18.5 MR3 and older versions with User Portal and Webadmin interfaces enabled.
[Impact] Remote attackers can bypass authentication to execute arbitrary code, potentially leading to full firewall compromise and internal network intrusion.
[Mitigation] Apply the official firmware patches immediately and disable WAN-side access to the Webadmin and User Portal interfaces.