Low severity2.7NVD Advisory· Published Dec 1, 2022· Updated Jun 17, 2026

CVE-2022-3710

Description

A post-auth read-only SQL injection vulnerability allows API clients to read non-sensitive configuration database contents in the API controller of Sophos Firewall releases older than version 19.5 GA.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Sophos/Xg Firewall Firmware
cpe:2.3:o:sophos:xg_firewall_firmware:*:*:*:*:*:*:*:*
Range: <19.5
Sophos/XG Firewallllm-fuzzy
Range: <19.5 GA
Sophos/Sophos Firewallcpe-rescue
Range: unspecified

Patches

Vulnerability mechanics

References

www.sophos.com/en-us/security-advisories/sophos-sa-20221201-sfos-19-5-0nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.176
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000