Sfos vulnerabilities

2 known vulnerabilities in Sfos from Sophos. 2 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Sophos Firewall Authentication Bypass Exploited

  CVE-2022-1040Mar 25, 2022SophosEPSS 99.8%

  An authentication bypass vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v18.5 MR3 and older.

• 9.8 Critical severity

  Sophos SFOS SQL Injection Exploited

  CVE-2020-12271Apr 27, 2020SophosEPSS 43.3%

  A SQL injection issue was found in SFOS 17.0, 17.1, 17.5, and 18.0 before 2020-04-25 on Sophos XG Firewall devices, as exploited in the wild in April 2020. This affected devices configured with either the administration (HTTPS) service or the User Portal expos