coldbraid

CVE-2022-3236 Sophos Firewall

A code injection vulnerability in the User Portal and Webadmin of Sophos Firewall allows for remote code execution.

CVSS
not scored

CWE-94

On CISA’s exploited list

Sophos Firewall Code Injection Vulnerability

Added
2022-09-23
Federal patch deadline
2022-10-14
Ransomware use
not known