CVE-2022-3236: Sophos Firewall Code Injection Vulnerability

Author : Sangfor Technologies
Published Date : 28 Sep 2022
Last Modified Date : 29 Sep 2022

Tag :

About CVE-2022-3236

Vulnerability Name	Sophos Firewall Code Injection Vulnerability (CVE-2022-3236)
Attack Type	Code Injection
Time Discovered	2022-09-27
Updated Time	2022-09-27
CVE ID	CVE-2022-3236

Summary

Recently, the Sangfor security team has detected a vulnerability security notice released by Sophos. The notice discloses a code injection vulnerability in Sophos Firewall. Vulnerability number: CVE-2022-3236, threat level: high risk. The vulnerability originates from code problems in the user portal and Webadmin, and attackers can exploit this vulnerability to construct malicious data execution remote code injection attacks, which eventually lead to remote code execution.

Affected Versions

Sophos Firewall≤ v19.0 MR1 (19.0.1)

Solution

At present, the latest official version has been released, and affected users are advised to upgrade to the latest version in time. The download link is as follows: https://www.sophos.com/en-us/support/downloads/firewall-installers

Meet the Author

Sangfor Technologies

Sangfor Technologies is a leading vendor of Cyber Security and Cloud Computing solutions. The majority of the blogs that you are seeing here are written by professionals working at Sangfor. We have a team of content writers, product managers and marketing experts who are taking care of writing articles on various topics that are relevant to our audience. Our team ensures that the articles published are factually correct and helpful to our customers and partners to know more about the recent trends on Cyber Security and Cloud, and how it can help their organizations.