CVE

CVE-2022-3236

Sophos Firewall Code Injection Vulnerability

Sophos · Firewall

Date added (CISA)

2022-09-23

Remediation due

2022-10-14

Known ransomware use

Not indicated

Remediation priority

P2 — past CISA due date

Description

A code injection vulnerability in the User Portal and Webadmin of Sophos Firewall allows for remote code execution.