Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Sophos Firewall 18.5 MR5, 19.0 MR2, 19.5 GA Clear all filters
TI-2022-03413 CVE-2022-3713 · GHSA-3rf2-rmw5-85x7

Code injection in Sophos Firewall

Priority MEDIUM 41

A code injection vulnerability allows adjacent attackers to execute code in the Wifi controller of Sophos Firewall releases older than version 19.5 GA.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00747 Published 2022-12-01 Fixed in 19.5 GA, 19.0 MR2 +1 CWE-94
TI-2022-03410 CVE-2022-3709 · GHSA-6784-6qw8-28jj

Cross-site scripting in Sophos Firewall

Priority MEDIUM 40

A stored XSS vulnerability allows admin to super-admin privilege escalation in the Webadmin import group wizard of Sophos Firewall releases older than version 19.5 GA.

CVSS 3.1HIGH 8.4 Network High privileges User interaction EPSS 0.0088 Published 2022-12-01 Fixed in 19.5 GA, 19.0 MR2 +1 CWE-79
TI-2022-02981 CVE-2022-3226 · GHSA-3f66-9wgv-7rw2

OS command injection in Sophos Firewall

Priority LOW 37

An OS command injection vulnerability allows admins to execute code via SSL VPN configuration uploads in Sophos Firewall releases older than version 19.5 GA.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01897 Published 2022-12-01 Fixed in 19.5 GA, 19.0 MR2 +1 CWE-78