CVE-2022-3236—Sophos Firewall Code Injection Vulnerability

漏洞名称

Sophos Firewall Code Injection Vulnerability

描述

A code injection vulnerability in the User Portal and Webadmin of Sophos Firewall allows for remote code execution.

已知用于勒索软件活动吗？

勒索软件状态：

Unknown

采集行动

Apply updates per vendor instructions.

其他说明

• https://www.sophos.com/en-us/security-advisories/sophos-sa-20220923-sfos-rce
• https://nvd.nist.gov/vuln/detail/CVE-2022-3236

相关新闻文章

• Chinese Hackers Use GHOSTSPIDER Malware to Hack Telecoms Across 12+ CountriesNovember 26, 2024
• Salt Typhoon hackers backdoor telcos with new GhostSpider malwareNovember 25, 2024
• FBI Seeks Public Help to Identify Chinese Hackers Behind Global Cyber IntrusionsNovember 5, 2024

相关 CWE

• CWE-94