CVE-2022-0331

—

CVSS 3.1

5.3 medium

EPSS

2%p73

Published

Mar 29, 2022 (Mar 29, 2022)

Modified

Jun 17, 2026

Description

An information disclosure vulnerability in Webadmin allows an unauthenticated remote attacker to read the device serial number in Sophos Firewall version v18.5 MR2 and older.

Vendors: sophos
Products: sfos
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.5%)

In the news0 stories

No ingested article mentions this CVE yet.