Skip to main content

Critical Security Update for Sophos Firewall

Critical security advisory addresses seven vulnerabilities including RCE

Threat ID:
CC-4223
Threat Severity:
Information only
Published:
6 December 2022 2:08 PM
Report a cyber attack: call 0300 303 5222 or email [email protected]

Summary

Critical security advisory addresses seven vulnerabilities including RCE

Affected platforms

The following platforms are known to be affected:

Versions: all prior to 19.5 GA

Sophos Firewall

Threat details

Introduction

Sophos has released a security update to address seven vulnerabilities affecting the Sophos Firewall. The critical vulnerability CVE-2022-3236 and three other high severity vulnerabilities are related to remote code execution (RCE). The medium and low severity vulnerabilities are related to privilege escalation and SQL injection. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

Exploitation in the wild

Sophos said exploitation for CVE-2022-3236, a code injection vulnerability allowing remote code execution, has been seen in the wild. CISA added it to their Known Exploited Vulnerabilities Catalog when the vulnerability was released.

Remediation advice

Affected organisations are encouraged to review the Sophos Security Update and upgrade the Sophos Firewall to the latest version.

Last edited: 18 January 2023 2:27 pm