CVE-2022-3226

An OS command injection vulnerability allows admins to execute code via SSL VPN configuration uploads in Sophos Firewall releases older than version 19.5 GA...

CVE-2022-3226

An OS command injection vulnerability allows admins to execute code via SSL VPN configuration uploads in Sophos Firewall releases older than version 19.5 GA...

CVE-2022-3226

The CVE-2022-3226 issue affects Sophos Firewall (older than 19.5 GA), where an OS command injection can be triggered by uploading SSL VPN configuration files. Root cause details are not elaborated beyond the exposure via configuration uploads in the cited advisories. The vulnerability impacts adm...