CVE-2022-3226 — Sophos / Sophos Firewall

CVE-2022-3226

Sophos / Sophos Firewall PUBLISHED

Description (CNA)

An OS command injection vulnerability allows admins to execute code via SSL VPN configuration uploads in Sophos Firewall releases older than version 19.5 GA.

Affected (CNA)

Vendor / product	Versions
Sophos / Sophos Firewall	affected unspecified before 19.5 GA; affected unspecified before 19.0 MR2; affected unspecified before 18.5 MR5

CWE

No CWE identifiers supplied.

References

https://www.sophos.com/en-us/security-advisories/sophos-sa-20221201-sfos-19-5-0

ADP enrichment

CVE

No English description supplied.

https://www.sophos.com/en-us/security-advisories/sophos-sa-20221201-sfos-19-5-0

CISA-ADP

No English description supplied.

No references supplied.