CVE-2022-3236

🗓️ 23 Sep 2022 12:50:13Reported by SophosType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 862 Views

Code injection vulnerability in Sophos Firewall v19.0 MR1 and olde

Reporter	Title	Published	Views	Family All 28
ICS	Russian Military Cyber Actors Target US and Global Critical Infrastructure	5 Sep 202412:00	–	ics
ATTACKERKB	CVE-2022-1040	25 Mar 202200:00	–	attackerkb
ATTACKERKB	CVE-2022-3236	23 Sep 202200:00	–	attackerkb
BDU FSTEC	The vulnerability of the User Portal and Webadmin network interface components of Sophos allows a hacker to execute arbitrary code.	26 Sep 202200:00	–	bdu_fstec
Circl	CVE-2022-3236	23 Sep 202216:13	–	circl
CISA KEV Catalog	Sophos Firewall Code Injection Vulnerability	23 Sep 202200:00	–	cisa_kev
CNNVD	Sophos Firewall 代码注入漏洞	23 Sep 202200:00	–	cnnvd
CNVD	Sophos Firewall Code Execution Vulnerability	28 Sep 202200:00	–	cnvd
Cvelist	CVE-2022-3236	23 Sep 202212:50	–	cvelist
hivepro	Sophos Zero-day vulnerability becomes target for attackers	30 Sep 202210:12	–	hivepro

NVD

Node

sophos firewallRange≤19.0.1

[
  {
    "product": "Sophos Firewall",
    "vendor": "Sophos",
    "versions": [
      {
        "lessThanOrEqual": "18.5 MR4",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "19.0 MR1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]