Vulnerability Details CVE-2022-3236
A code injection vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v19.0 MR1 and older.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.927
EPSS Ranking 99.7%
CVSS Severity
CVSS v3 Score 9.8
Proposed Action
A code injection vulnerability in the User Portal and Webadmin of Sophos Firewall allows for remote code execution.
Ransomware Campaign
Unknown
References