Critical Remote Code Execution Vulnerability in Sophos Firewall

Posted on 28 March 2022
By SecurityIT
In Application Security, Audits, Cloud Security, Cyberwarfare, Data Protection, Email Security, Endpoint Security, Fraud & Identity Theft, Identity & Access, Malware, Network Security, NEWS & INDUSTRY, Phishing, Privacy, Virus & Malware, Vulnerabilities

Sophos on Friday announced the rollout of urgent patches for a critical authentication bypass vulnerability in the web portal of its Sophos Firewall product.

Reported by an external researcher via the Sophos bug bounty program, the vulnerability is tracked as CVE-2022-1040 and impacts Sophos Firewall v18.5 MR3 (18.5.3) and older releases.