PULSE
FEED
ransomqilin reclama a Insurance Audit Services · US · Financial Servicesransomn0n reclama a Company #137 · CAransomn0n reclama a Company #136 · DKransomn0n reclama a Company #135 · IDransomn0n reclama a Company #134 · USransomn0n reclama a Company #133 · USransomredact reclama a Omni Hotels & Resorts · US · Hospitalityransomakira reclama a Westboro Partnersransomakira reclama a System Plus · Technologyransomakira reclama a David L Wade & Associates · Professional Servicesransomakira reclama a Source Energy Services · CA · Energy & Utilitiesransomaoqin reclama a Sistel · BR · Technologyransombyod reclama a First and Final Warning - IHG Hotels & Resorts (Estate) · Hospitalityransomqilin reclama a Calvary Christian College · AU · Educationransomqilin reclama a Insurance Audit Services · US · Financial Servicesransomn0n reclama a Company #137 · CAransomn0n reclama a Company #136 · DKransomn0n reclama a Company #135 · IDransomn0n reclama a Company #134 · USransomn0n reclama a Company #133 · USransomredact reclama a Omni Hotels & Resorts · US · Hospitalityransomakira reclama a Westboro Partnersransomakira reclama a System Plus · Technologyransomakira reclama a David L Wade & Associates · Professional Servicesransomakira reclama a Source Energy Services · CA · Energy & Utilitiesransomaoqin reclama a Sistel · BR · Technologyransombyod reclama a First and Final Warning - IHG Hotels & Resorts (Estate) · Hospitalityransomqilin reclama a Calvary Christian College · AU · Education
← Todos os CVEs
CVE Watch—

CVE-2022-1040

Sophos Firewall Authentication Bypass Vulnerability

CVSS

—

Sem CVSS

EPSS

99.8%

p100

KEV

SIM

31 de mar. de 2022

Exploit Today

80

0-100

Publicado: — · Última mod.: —

EPSS · 30d
99.8%EPSS · 30 dias99.8%
2026-10-082026-11-05
Ficha do catálogo KEV

Produto

Sophos / Firewall

Vulnerabilidade

Sophos Firewall Authentication Bypass Vulnerability

Adicionado ao KEV

31 de mar. de 2022

Corrigir até

21 de abr. de 2022

Uso conhecido em ransomware

Não

Descrição resumida

An authentication bypass vulnerability in User Portal and Webadmin of Sophos Firewall allows for remote code execution.

Ação necessária

Apply updates per vendor instructions.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2022-1040

CVEs relacionados
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2022-3236—
99.9%
KEV—80Sophos Firewall Code Injection Vulnerability—