What it is
A code injection vulnerability in the User Portal and Webadmin of Sophos Firewall allows for remote code execution.
What to do
Apply updates per vendor instructions.
Vendor notices and references
- www.sophos.com/en-us/security-advisories/sophos-sa-20220923-sfos-rce
- nvd.nist.gov/vuln/detail/CVE-2022-3236
Description and required action as published by CISA. Full record at NVD.
Other Sophos entries on the list
- CyberoamOS CyberoamOS (CROS) SQL Injection Vulnerability CVE-2020-29574 · Feb 6, 2025
- XG Firewall Sophos XG Firewall Buffer Overflow Vulnerability CVE-2020-15069 · Feb 6, 2025
- Web Appliance Sophos Web Appliance Command Injection Vulnerability CVE-2023-1671 · Nov 16, 2023
- Firewall Sophos Firewall Authentication Bypass Vulnerability CVE-2022-1040 · Mar 31, 2022
- SG UTM Sophos SG UTM Remote Code Execution Vulnerability CVE-2020-25223 · Mar 25, 2022
- SFOS Sophos SFOS SQL Injection Vulnerability CVE-2020-12271 · Nov 3, 2021