critical9.8Known exploitedPublic exploit code
CVE-2022-1040
Sophos Firewall Authentication Bypass Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2022-03-31. Federal due date: 2022-04-21.
Apply updates per vendor instructions.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Sophos XG115w Firewall 17.0.10 MR-10 - Authentication Bypass2022-09-02 · webapps · hardware
Impact
An authentication bypass vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v18.5 MR3 and older.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sophos | Sfos | through 18.5.3 |
References
- NVD record
- CVE.org record
- CISA KEV catalog
- http://packetstormsecurity.com/files/168046/Sophos-XG115w-Firewall-17.0.10-MR-10-Authentication-Bypass.html
- https://www.exploit-db.com/exploits/51006
- https://www.sophos.com/en-us/security-advisories/sophos-sa-20220325-sfos-rce
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-1040