Sophos XG115w Firewall 17.0.10 MR-10 - Authentication Bypass

Exploit Title: Sophos XG115w Firewall 17.0.10 MR-10 - Authentication Bypass Date: 2022-08-04 Exploit Author: Aryan Chehreghani Vendor Homepage: https://www.sophos.com Version: 17.0.10 MR-10 Tested on: Windows 11 CVE : CVE-2022-1040 VULNERABILITY DETAILS : This vulnerability allows an attacker to...

Sophos XG115w Firewall 17.0.10 MR-10 - Authentication Bypass Vulnerability

Aryan Chehreghani Exploit Title: Sophos XG115w Firewall 17.0.10 MR-10 - Authentication Bypass Exploit Author: Aryan Chehreghani Vendor Homepage: https://www.sophos.com Version: 17.0.10 MR-10 Tested on: Windows 11 CVE : CVE-2022-1040 VULNERABILITY DETAILS : This vulnerability allows an attacker to...

Sophos XG115w Firewall 17.0.10 MR-10 Authentication Bypass

Exploit Title: Sophos XG115w Firewall 17.0.10 MR-10 - Authentication Bypass Date: 2022-08-09 Exploit Author: Aryan Chehreghani Vendor Homepage: https://www.sophos.com Version: 17.0.10 MR-10 Tested on: Windows 11 CVE : CVE-2022-1040 VULNERABILITY DETAILS : This vulnerability allows an attacker to...

Hackers Target Ukrainian Software Company Using GoMet Backdoor

A large software development company whose software is used by different state entities in Ukraine was at the receiving end of an "uncommon" piece of malware, new research has found. The malware, first observed on the morning of May 19, 2022, is a custom variant of the open source backdoor known ...

Attackers target Ukraine using GoMet backdoor

Executive summary Since the Russian invasion of Ukraine began, Ukrainians have been under a nearly constant barrage of cyber attacks. Working jointly with Ukrainian organizations, Cisco Talos has discovered a fairly uncommon piece of malware targeting Ukraine — this time aimed at a large software...

Chinese Hackers Exploited Sophos Firewall Zero-Day Flaw to Target South Asian Entity

A sophisticated Chinese advanced persistent threat APT actor exploited a critical security vulnerability in Sophos' firewall product that came to light earlier this year to infiltrate an unnamed South Asian target as part of a highly-targeted attack. "The attacker implemented an interesting web...

Sophos MR3 Firewall Remote Code Execution (CVE-2022-1040)

A remote code execution vulnerability exists in Sophos MR3 Firewall. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Sophos XG Firewall User Portal and Webadmin Authentication Bypass (CVE-2022-1040)

Binary data sophosxgfirewallcve-2022-1040.nbin...

SUSE SLED15: libprotobuf-lite20 / libprotobuf20 / libprotoc20 / protobuf-devel / etc (SUSE-SU-2022:1040-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:1040-1 advisory. - CVE-2021-22570: Fix incorrect parsing of nullchar in the proto symbol bsc1195258. Tenable has extracted the preceding...

Sophos Firewall RCE vulnerability actively exploited

THREAT LEVEL: Amber For a detailed advisory, download the pdf file here A security researcher has discovered an authentication bypass vulnerability that resides in the User Portal and Webadmin areas of Sophos Firewall. Attackers are actively exploiting this vulnerability to attack enterprises in...

Critical Sophos Firewall RCE Vulnerability Under Active Exploitation

Cybersecurity firm Sophos on Monday warned that a recently patched critical security vulnerability in its firewall product is being actively exploited in real-world attacks. The flaw, tracked as CVE-2022-1040, is rated 9.8 out of 10 on the CVSS scoring system and impacts Sophos Firewall versions...

CVE-2022-1040

creationtimestamp| type| source ---|---|--- 2022-03-25 15:30:39+00:00| seen| https://t.me/cibsecurity/39533 2022-03-27 14:33:12+00:00| seen| https://t.me/BleepingComputer/11671 2022-03-27 19:17:05+00:00| seen| https://t.me/cKure/9191 2022-03-28 10:46:00+00:00| exploited|...

CVE-2022-1040

An authentication bypass vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v18.5 MR3 and older...

CVE-2022-1040

An authentication bypass vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v18.5 MR3 and older...

CVE-2022-1040

An authentication bypass vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v18.5 MR3 and older. Recent assessments: jbaines-r7 at April 15, 2022 7:28pm UTC reported: On March 25, 2022, Sophos published a critical security advisory fo...

CVE-2021-1040

creationtimestamp| type| source ---|---|--- 2021-12-15 22:39:53+00:00| seen| https://t.me/cibsecurity/34079...

CVE-2021-1040

CVE-2021-1040 describes an elevation-of-privilege vulnerability in Android where, in onCreate of BluetoothPairingSelectionFragment.java, a tapjacking/overlay attack could enable local escalation of privilege without requiring extra execution privileges. Affected products/versions include Android ...

CVE-2020-1040

creationtimestamp| type| source ---|---|--- 2021-11-08 08:58:18+00:00| seen| MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422 2021-11-20 09:53:52+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:23:02+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971013 2025-02-23...

Huawei EulerOS: Security Advisory for net-snmp (EulerOS-SA-2021-1040)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-1040

CVE-2020-1040 : A remote code execution vulnerability exists in Hyper-V RemoteFX vGPU where input from a guest OS is not properly validated by the host server. This affects the RemoteFX vGPU feature of Hyper-V and can allow an attacker with authenticated access on the guest OS to execute code on ...