Class familySophos · Firewall
Sophos Firewall code injection flaws, 2022–2024
4 Firewall CVEs with CWE-94 weaknesses, 23 Sep 2022 to 19 Dec 2024. 1 is in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
3 2022’22
2023’23
1 2024’24
In CISA KEVNot in KEV
20223 CVEs, 1 in KEV
20241 CVE
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2022-3236KEV | 23 Sep 2022 | Sophos Firewall Code Injection Vulnerability | Grouped by weakness | 73.7 |
| CVE-2022-3696 | 1 Dec 2022 | A post-auth code injection vulnerability allows admins to execute code in Webadmin of Sophos Firewall releases older… | Grouped by weakness | 18.7 |
| CVE-2022-3713 | 1 Dec 2022 | A code injection vulnerability allows adjacent attackers to execute code in the Wifi controller of Sophos Firewall… | Grouped by weakness | 16.9 |
| CVE-2024-12729 | 19 Dec 2024 | A post-auth code injection vulnerability in the User Portal allows authenticated users to execute code remotely in… | Grouped by weakness | 20.3 |