Australian Cyber Security Centre
Background /What has happened?
A remote code execution (RCE) vulnerability (CVE-2022-1040) has been identified in User Portal and Webadmin of Sophos Firewall in versions 18.5 MR3 (18.5.3) and older. Sophos Firewall software provides network and user endpoint security.
Exploitation of an RCE vulnerability could allow a malicious actor to remotely install malware or otherwise control the affected device.
Exploitation attempts have been observed. The ACSC is not aware of any successful exploitation attempts against Australian organisations.
/Public Release. View in full here.
