PT-2022-23706 · Sophos · Sophos Firewall

Published 2022-12-01 · Updated 2022-12-07 · CVE-2022-3696

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Sophos Firewall versions prior to 19.5 GA

Description A post-auth code injection issue allows admins to execute code in the Webadmin of Sophos Firewall. This issue does not specify the estimated number of potentially affected devices worldwide or details about real-world incidents where this issue was exploited.

Recommendations For Sophos Firewall versions prior to 19.5 GA, update to version 19.5 GA or later to resolve the issue. As a temporary workaround, consider restricting access to the Webadmin interface until the update is applied.

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2022-3696

Affected Products

Sophos Firewall

References · 6

• https://osv.dev/vulnerability/CVE-2022-3696 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-3696 · Security Note
• https://sophos.com/en-us/security-advisories/sophos-sa-20221201-sfos-19-5-0 · Vendor Advisory
• https://t.me/cibsecurity/53771 · Telegram Post
• https://t.me/true_secator/3794 · Telegram Post
• https://t.me/cvenotify/39117 · Telegram Post