Exploit / PoCcriticalExploited in the wild

Sophos fixed a critical flaw in its Sophos Firewall version 19.5

Security Affairsby @securityaffairsDec 7, 2022 · 07:03 UTC (Dec 7, 2022)1 min read2

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2022-3236 CVE-2022-3226 CVE-2022-3713 CVE-2022-3696 CVE-2022-3709 CVE-2022-3711 CVE-2022-3710

Tags: cve-2022-3236 cve-2022-3226 cve-2022-3713 cve-2022-3696 cve-2022-3709 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-3713 +5 related CVEs CVE-2022-3709 CVE-2022-3226 CVE-2022-3696 CVE-2022-3711 CVE-2022-3710	A code injection vulnerability allows adjacent attackers to execute code in the Wifi controller of Sophos Firewall releases older than version 19.5 GA	8.8 group max	<1%		Dec 1, 2022
CVE-2022-3236	Unauthenticated Code Injection RCE in Sophos Firewall (User Portal/Webadmin)	9.8	99%	KEV	Sep 23, 2022 KEV Sep 23, 2022

From the original article

1 min read at securityaffairs.com

Sophos addressed several vulnerabilities affecting its Sophos Firewall version 19. 5, including arbitrary code execution issues. Sophos has released security patches to address seven vulnerabilities in Sophos Firewall version 19.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.