Lucene search

CVE-2022-1040

🗓️ 25 Mar 2022 00:00:00Reported by AttackerKBType

An authentication bypass vulnerability in Sophos Firewall v18.5 MR3 and older allows remote code execution via User Portal and Webadmin

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 61
The Hacker News	Hackers Exploited Zero-Day RCE Vulnerability in Sophos Firewall — Patch Released	24 Sep 202205:03	–	thn
The Hacker News	FBI Seeks Public Help to Identify Chinese Hackers Behind Global Cyber Intrusions	5 Nov 202417:15	–	thn
The Hacker News	Critical Sophos Firewall RCE Vulnerability Under Active Exploitation	29 Mar 202210:32	–	thn
The Hacker News	Critical SonicOS Vulnerability Affects SonicWall Firewall Appliances	30 Mar 202203:25	–	thn
The Hacker News	Hackers Target Ukrainian Software Company Using GoMet Backdoor	21 Jul 202212:02	–	thn
The Hacker News	Chinese Hackers Exploited Sophos Firewall Zero-Day Flaw to Target South Asian Entity	17 Jun 202209:39	–	thn
The Hacker News	Chinese Espionage Hackers Target Tibetans Using New LOWZERO Backdoor	26 Sep 202212:14	–	thn
The Hacker News	U.S. Charges Chinese Hacker for Exploiting Zero-Day in 81,000 Sophos Firewalls	11 Dec 202406:29	–	thn
The Hacker News	Zyxel Releases Patches for Critical Bug Affecting Business Firewall and VPN Devices	1 Apr 202206:02	–	thn
The Hacker News	Chinese Hackers Use GHOSTSPIDER Malware to Hack Telecoms Across 12+ Countries	26 Nov 202410:19	–	thn

Source	Link
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
sophos	www.sophos.com/en-us/security-advisories/sophos-sa-20220325-sfos-rce
news	www.news.sophos.com/en-us/2024/10/31/pacific-rim-timeline/
packetstormsecurity	www.packetstormsecurity.com/files/168046/Sophos-XG115w-Firewall-17.0.10-MR-10-Authentication-Bypass.html
exploit-db	www.exploit-db.com/exploits/51006

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

25 Mar 2022 00:00Current

10High risk

Vulners AI Score10

CVSS27.5

CVSS39.8

EPSS0.94423