VulnSocial

CVE-2022-3236Disclosure(sophos / firewall)

LOWCVSS 9.8 · CRITICALCISA KEV

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A code injection vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v19.0 MR1 and older.

sophos CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2022-10-14. Apply updates per vendor instructions.

Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-94

Priority

LOW

Exploitation

ACTIVE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • firewall

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • 1 total mentions across 1 day

Affected systems

Vendors
sophos
Products
firewall

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-02-10: 1Technical Details · 2026-02-10: 102-10
Signal classification1 categories
Disclosure
1100.0%
Referenced assets1 URL
By indicator
Full discourse1 post
  • pdnuclei-bot@pdnuclei_bot
    Disclosure

    🚨 CVE-2022-3236 - critical 🚨 Sophos Firewall <= 19.0 MR1 - Remote Code Execution > Sophos Firewall version v19.0 MR1 and older is vulnerable to code injection in the Us... 👾 https://cloud.projectdiscovery.io/library/CVE-2022-3236 @pdnuclei #NucleiTemplates #cve

    Post summary

    The post announces CVE‑2022‑3236 as a critical remote code execution flaw in Sophos Firewall versions ≤ 19.0 MR1, noting a code‑injection vulnerability but offering no PoC, exploit, or patch details.

    00001130
    890 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appsophosfirewall---

Explore more

Back to dashboardsophos CVEsfirewall vulnerabilities