Exploit / PoCcritical

Chinese Hackers Exploited Sophos Firewall Zero

The Hacker Newsby @TheHackersNewsJun 18, 2022 · 03:43 UTC (Jun 18, 2022)3 min read3 · 1 read

Read at thehackernews.com

Analyze CVE-2022-1040 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2022-1040 CVE-2022-26134

Tags: cve-2022-1040 cve-2022-26134 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-1040	Authentication Bypass Leading to Unauthenticated RCE in Sophos Firewall (SFOS)	9.8	100%	KEVPoC ×2	Mar 25, 2022 KEV Mar 31, 2022
CVE-2022-26134	Unauthenticated OGNL Injection RCE in Atlassian Confluence Server/Data Center	9.8	100%	KEVRansomwarePoC ×2	Jun 3, 2022 KEV Jun 2, 2022

From the original article

3 min read at thehackernews.com

A sophisticated Chinese advanced persistent threat (APT) actor exploited a critical security vulnerability in Sophos' firewall product that came to light earlier this year to infiltrate an unnamed South Asian target as part of a highly-targeted attack.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.