CVE-2022-1040
SO
Sophos Firewall
Sophos Firewall Authentication Bypass Vulnerability
What it is
An authentication bypass vulnerability in User Portal and Webadmin of Sophos Firewall allows for remote code execution.
What to do
Apply updates per vendor instructions.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other Sophos entries on the list
- CyberoamOS CyberoamOS (CROS) SQL Injection Vulnerability CVE-2020-29574 · Feb 6, 2025
- XG Firewall Sophos XG Firewall Buffer Overflow Vulnerability CVE-2020-15069 · Feb 6, 2025
- Web Appliance Sophos Web Appliance Command Injection Vulnerability CVE-2023-1671 · Nov 16, 2023
- Firewall Sophos Firewall Code Injection Vulnerability CVE-2022-3236 · Sep 23, 2022
- SG UTM Sophos SG UTM Remote Code Execution Vulnerability CVE-2020-25223 · Mar 25, 2022
- SFOS Sophos SFOS SQL Injection Vulnerability CVE-2020-12271 · Nov 3, 2021