Unrated severityCISA KEVNVD Advisory· Published Mar 25, 2022· Updated Oct 21, 2025
CVE-2022-1040
CVE-2022-1040
Description
An authentication bypass vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v18.5 MR3 and older.
Affected products
1- Sophos/Sophos Firewallv5Range: unspecified
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- packetstormsecurity.com/files/168046/Sophos-XG115w-Firewall-17.0.10-MR-10-Authentication-Bypass.htmlmitrex_refsource_MISC
- www.exploit-db.com/exploits/51006mitrex_refsource_MISC
- www.sophos.com/en-us/security-advisories/sophos-sa-20220325-sfos-rcemitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.