VULNERABILITY INTELLIGENCE

CVE-2022-3236

CVSS score9.8 CRITICAL
EPSS probability98.91%
CISA KEVKnown exploited vulnerability
Published2022-09-23
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Known Exploited Vulnerability

Sophos Firewall Code Injection Vulnerability

Vendor / product: Sophos / Firewall

Description

A code injection vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v19.0 MR1 and older.

Weakness classification

  • CWE-94: Improper Control of Generation of Code ('Code Injection')

Primary references