Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cnvdChina National Vulnerability DatabaseCNVD-2022-88208
HistorySep 28, 2022 - 12:00 a.m.

Sophos Firewall code execution vulnerability

2022-09-2800:00:00
China National Vulnerability Database
www.cnvd.org.cn
18

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

JSON

Sophos Firewall is a firewall from Sophos UK.Sophos Firewall 19.0.1 and earlier versions are vulnerable to a code execution vulnerability in User Portal and Webadmin that fails to properly filter the special elements of the constructed code segment. An attacker could exploit the vulnerability to cause arbitrary code execution.

CPENameOperatorVersion
sophos sophos firewallle19.0.1

Related

githubexploit 7
cisa_kev 1
nessus 1
prion 1
hivepro 1
cve 1
attackerkb 2
qualysblog 2
thn 2
githubexploit
githubexploit
Exploit for Injection in Sophos Firewall
2022-10-15 12:43:46
Exploit for Injection in Sophos Firewall
2022-11-25 18:43:37
Exploit for Injection in Sophos Firewall
2022-12-11 18:16:53
cisa_kev
cisa_kev
Sophos Firewall Code Injection Vulnerability
2022-09-23 00:00:00
nessus
nessus
Sophos XG Firewall <= 19.0.1 RCE
2022-11-23 00:00:00
prion
prion
Code injection
2022-09-23 13:15:00
hivepro
hivepro
Sophos Zero-day vulnerability becomes target for attackers
2022-09-30 10:12:52
cve
cve
CVE-2022-3236
2022-09-23 13:15:00
attackerkb
attackerkb
CVE-2022-3236
2022-09-23 00:00:00
CVE-2022-1040
2022-03-25 00:00:00
qualysblog
qualysblog
Qualys Threat Research Thursday
2022-09-29 14:32:00
October 2022 Patch Tuesday | Microsoft Releases 84 Vulnerabilities with 13 Critical, plus 12 Microsoft Edge (Chromium-Based); Adobe Releases 4 Advisories, 29 Vulnerabilities with 17 Critical.
2022-10-11 20:00:00
thn
thn
Hackers Exploited Zero-Day RCE Vulnerability in Sophos Firewall — Patch Released
2022-09-24 05:03:00
Microsoft's Final 2023 Patch Tuesday: 34 Flaws Fixed, Including 4 Critical
2023-12-13 05:50:00

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

JSON
Related for CNVD-2022-88208
githubexploit7cisa_kev1nessus1prion1hivepro1cve1attackerkb2qualysblog2thn2