high7.2
CVE-2022-3226
An OS command injection vulnerability allows admins to execute code via SSL VPN configuration uploads in Sophos Firewall releases older than version 19.5 GA.
Impact
An OS command injection vulnerability allows admins to execute code via SSL VPN configuration uploads in Sophos Firewall releases older than version 19.5 GA.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sophos | Xg Firewall Firmware | through 19.0 |