PT-2022-13110 · Sophos · Sophos Firewall

Mohammed Adel · Published 2022-03-29 · Updated 2023-08-08 · CVE-2022-0331

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Sophos Firewall versions prior to v18.5 MR3

Description An information disclosure issue in Webadmin allows an unauthenticated remote attacker to read the device serial number.

Recommendations For Sophos Firewall versions prior to v18.5 MR3, update to a version newer than v18.5 MR2 to resolve the issue.

Fix

Related Identifiers

CVE-2022-0331

Affected Products

Sophos Firewall

References · 4

• https://osv.dev/vulnerability/CVE-2022-0331 · Vendor Advisory
• https://sophos.com/en-us/security-advisories/sophos-sa-20220328-sfos-18-5-3 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-0331 · Security Note
• https://t.me/cibsecurity/39707 · Telegram Post