CVE-2022-1040

CVE Published 2022-03-25
Related Vendor(s) sophos
Related Product(s) sfos
Exploitation Reported (CISA KEV) 2022-03-31
CVSS 3 Base Score 9.8 (CRITICAL)
CVSS 3 Attack Complexity LOW
CVSS 3 Attack Vector NETWORK

An authentication bypass vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v18.5 MR3 and older.

Cyber Threat Graph Context

Explore how this CVE relates to the wider threat graph

References