Code injection

2022-12-0118:15:00

PRIOn knowledge base

www.prio-n.com

code injection

vulnerability

sophos firewall

webadmin

version 19.5

nvd

7.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.6%

A post-auth code injection vulnerability allows admins to execute code in Webadmin of Sophos Firewall releases older than version 19.5 GA.

CPENameOperatorVersion
xg_firewall_firmwarele19.0

CPE	Name	Operator	Version
	xg_firewall_firmware	le	19.0

References

www.sophos.com/en-us/security-advisories/sophos-sa-20221201-sfos-19-5-0