Severity
High
Analysis Summary
CVE-2022-1040
An authentication bypass vulnerability allowing remote code execution was discovered in the User Portal and Webadmin of Sophos Firewall and responsibly disclosed to Sophos. It was reported via the Sophos bug bounty program by an external security researcher. The vulnerability has been fixed.
There is no action required for Sophos Firewall customers with the “Allow automatic installation of hotfixes” feature enabled. Enabled is the default setting
Impact
- Code Execution
Indicators Of Compromise
CVE
- CVE-2022-1040
Affected Vendors
- Sophos
Affected Products
- Sophos Firewall v18.5 MR3 (18.5.3) and older
Remediation
Refer to Sophos Security Advisory for patch, upgrade, or suggested workaround information.