PT-2022-14128 · Sophos · Sophos Firewall

Published 2022-09-07 · Updated 2022-09-12 · CVE-2022-1807

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Sophos Firewall versions prior to 18.5 MR4 Sophos Firewall versions prior to 19.0 MR1

Description The issue concerns multiple SQL injection vulnerabilities in the Webadmin component of Sophos Firewall. These vulnerabilities can be exploited to achieve privilege escalation from an admin to a super-admin level.

Recommendations For versions prior to 18.5 MR4, update to version 18.5 MR4 or later. For versions prior to 19.0 MR1, update to version 19.0 MR1 or later.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2022-1807

Affected Products

Sophos Firewall

References · 4

• https://sophos.com/en-us/security-advisories/sophos-sa-20220907-sfos-19-0-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-1807 · Security Note
• https://sophos.com/en-us/security-advisories/sophos-sa-20220907-sfos-18-5-4 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-1807 · Vendor Advisory