Unrated severityCISA KEVNVD Advisory· Published Mar 25, 2022· Updated Oct 21, 2025
CVE-2022-1040
CVE-2022-1040
Description
An authentication bypass vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v18.5 MR3 and older.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2<=v18.5 MR3+ 1 more
- (no CPE)range: <=v18.5 MR3
- (no CPE)range: unspecified
Patches
Vulnerability mechanics
References
3- packetstormsecurity.com/files/168046/Sophos-XG115w-Firewall-17.0.10-MR-10-Authentication-Bypass.htmlmitrex_refsource_MISC
- www.exploit-db.com/exploits/51006mitrex_refsource_MISC
- www.sophos.com/en-us/security-advisories/sophos-sa-20220325-sfos-rcemitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.