CVE-2022-1040
Description
An authentication bypass vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v18.5 MR3 and older.
Risk Information
Base Score
9.8
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
94.439
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Multiple Vulnerabilities affected in sfos 17.0 | NCM |
| Multiple Vulnerabilities affected in sfos 17.1 | NCM |
| Vulnerabilities CVE-2018-16118 ,CVE-2022-1040 ,CVE-2022-0331 are affected in sfos 16.5 | NCM |
| Vulnerabilities CVE-2020-11503 ,CVE-2020-12271 ,CVE-2022-1040 ,CVE-2022-0331 are affected in sfos 17.1-maintenance_release3 | NCM |
| Vulnerabilities CVE-2020-11503 ,CVE-2020-12271 ,CVE-2022-1040 ,CVE-2022-0331 are affected in sfos 17.5-maintenance_release9 | NCM |
| Vulnerabilities CVE-2020-11503 ,CVE-2020-12271 ,CVE-2022-1040 ,CVE-2022-0331 are affected in sfos 17.5-maintenance_release8 | NCM |
| Vulnerabilities CVE-2020-11503 ,CVE-2020-12271 ,CVE-2022-1040 ,CVE-2022-0331 are affected in sfos 17.5-maintenance_release7 | NCM |
| Vulnerabilities CVE-2020-11503 ,CVE-2020-12271 ,CVE-2022-1040 ,CVE-2022-0331 are affected in sfos 17.5-maintenance_release6 | NCM |
| Vulnerabilities CVE-2020-11503 ,CVE-2020-12271 ,CVE-2022-1040 ,CVE-2022-0331 are affected in sfos 17.5-maintenance_release5 | NCM |
| Vulnerabilities CVE-2020-11503 ,CVE-2020-12271 ,CVE-2022-1040 ,CVE-2022-0331 are affected in sfos 17.5-maintenance_release4 | NCM |
| Vulnerabilities CVE-2020-11503 ,CVE-2020-12271 ,CVE-2022-1040 ,CVE-2022-0331 are affected in sfos 17.5-maintenance_release3 | NCM |
| Vulnerabilities CVE-2020-11503 ,CVE-2020-12271 ,CVE-2022-1040 ,CVE-2022-0331 are affected in sfos 17.5-maintenance_release2 | NCM |
| Vulnerabilities CVE-2020-11503 ,CVE-2020-12271 ,CVE-2022-1040 ,CVE-2022-0331 are affected in sfos 17.5-maintenance_release11 | NCM |
| Vulnerabilities CVE-2020-11503 ,CVE-2020-12271 ,CVE-2022-1040 ,CVE-2022-0331 are affected in sfos 17.5-maintenance_release10 | NCM |
| Vulnerabilities CVE-2020-11503 ,CVE-2020-12271 ,CVE-2022-1040 ,CVE-2022-0331 are affected in sfos 17.5-maintenance_release1 | NCM |
| Vulnerabilities CVE-2020-11503 ,CVE-2020-12271 ,CVE-2022-1040 ,CVE-2022-0331 are affected in sfos 17.5 | NCM |
| Vulnerabilities CVE-2020-11503 ,CVE-2020-12271 ,CVE-2022-1040 ,CVE-2022-0331 are affected in sfos 17.1-maintenance_release4 | NCM |
| Vulnerabilities CVE-2020-11503 ,CVE-2020-12271 ,CVE-2022-1040 ,CVE-2022-0331 are affected in sfos 17.1-maintenance_release2 | NCM |
| Vulnerabilities CVE-2020-11503 ,CVE-2020-12271 ,CVE-2022-1040 ,CVE-2022-0331 are affected in sfos 17.1-maintenance_release1 | NCM |
| Vulnerabilities CVE-2020-11503 ,CVE-2020-12271 ,CVE-2022-1040 ,CVE-2022-0331 are affected in sfos 17.0-maintenance_release9 | NCM |
| Vulnerabilities CVE-2020-11503 ,CVE-2020-12271 ,CVE-2022-1040 ,CVE-2022-0331 are affected in sfos 17.0-maintenance_release8 | NCM |
| Vulnerabilities CVE-2020-11503 ,CVE-2020-12271 ,CVE-2022-1040 ,CVE-2022-0331 are affected in sfos 17.0-maintenance_release7 | NCM |
| Vulnerabilities CVE-2020-11503 ,CVE-2020-12271 ,CVE-2022-1040 ,CVE-2022-0331 are affected in sfos 17.0-maintenance_release6 | NCM |
| Vulnerabilities CVE-2020-11503 ,CVE-2020-12271 ,CVE-2022-1040 ,CVE-2022-0331 are affected in sfos 17.0-maintenance_release5 | NCM |
| Vulnerabilities CVE-2020-11503 ,CVE-2020-12271 ,CVE-2022-1040 ,CVE-2022-0331 are affected in sfos 17.0-maintenance_release4 | NCM |
| Vulnerabilities CVE-2020-11503 ,CVE-2020-12271 ,CVE-2022-1040 ,CVE-2022-0331 are affected in sfos 17.0-maintenance_release3 | NCM |
| Vulnerabilities CVE-2020-11503 ,CVE-2020-12271 ,CVE-2022-1040 ,CVE-2022-0331 are affected in sfos 17.0-maintenance_release2 | NCM |
| Vulnerabilities CVE-2020-11503 ,CVE-2020-12271 ,CVE-2022-1040 ,CVE-2022-0331 are affected in sfos 17.0-maintenance_release1 | NCM |
| Vulnerabilities CVE-2020-12271 ,CVE-2022-1040 ,CVE-2022-0331 are affected in sfos 18.0 | NCM |
| Vulnerabilities CVE-2020-12271 ,CVE-2022-1040 ,CVE-2022-0331 are affected in sfos 17.5-maintenance_release12 | NCM |
| Vulnerabilities CVE-2022-1040 ,CVE-2022-0331 are affected in sfos 15.01.0-mr-2 | NCM |
| Vulnerabilities CVE-2022-1040 ,CVE-2022-0331 are affected in sfos 15.01.0-mr-1.1 | NCM |
| Vulnerabilities CVE-2022-1040 ,CVE-2022-0331 are affected in sfos 15.01.0-mr-3 | NCM |
| Vulnerabilities CVE-2022-1040 are affected in sfos 18.5.2 | NCM |
| Vulnerabilities CVE-2022-1040 are affected in sfos 18.5.3 | NCM |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234