RULE(RULE ID:338380)

Rule General Information
Release Date: 2024-08-28
Rule Name: Sophos Firewall User Portal and Webadmin Code Injection Vulnerability (CVE-2022-3236)
Severity:
CVE ID:
Rule Protection Details
Description: A code injection vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v19.0 MR1 and older.
Impact: An attacker could exploit this vulnerability to have unspecified effect.
Affected OS: Windows, Linux, Others
Reference: https://www.sophos.com/en-us/security-advisories/sophos-sa-20220923-sfos-rce
Solutions
Refer to the announcement or patch by the vendor: https://www.sophos.com/en-us/security-advisories/sophos-sa-20220923-sfos-rce