CVE-2022-3713

CVSS 3.1: 8.8 high
EPSS: <1%p50
Published: Dec 1, 2022 · Dec 1, 2022
Modified: Jun 17, 2026

Analyze CVE-2022-3713 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

A code injection vulnerability allows adjacent attackers to execute code in the Wifi controller of Sophos Firewall releases older than version 19.5 GA.

Vendors: sophos

Products: xg firewall firmware

Weakness: CWE-94

Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news

1 story

Sophos fixed a critical flaw in its Sophos Firewall version 19.5

Security AffairsDec 7, 07:03 UTC · Dec 7, 2022Exploit / PoCExploitedCVE-2022-3236 CVE-2022-3226 CVE-2022-3713+42