CVE-2022-3713

—

CVSS 3.1

8.8 high

EPSS

<1%p50

Published

Dec 1, 2022 (Dec 1, 2022)

Modified

Jun 17, 2026

Description

A code injection vulnerability allows adjacent attackers to execute code in the Wifi controller of Sophos Firewall releases older than version 19.5 GA.

Vendors: sophos
Products: xg firewall firmware
Weakness: CWE-94
Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news1 stories

Sophos fixed a critical flaw in its Sophos Firewall version 19.5

Security AffairsDec 7, 07:03 UTC · Dec 7, 2022Exploit / PoC in the wildCVE-2022-3236 CVE-2022-3226 CVE-2022-3713+4 CVEs