Over 4,000 Internet-facing Sophos Firewalls Vulnerable to Code Injection Attacks

The Sophos Firewall Webadmin and User Portal HTTP interfaces are vulnerable to unauthenticated and remote code execution, as stated in an alert released by Sophos in September. The vulnerability, CVE-2022-3236, was reportedly utilized against “a small collection of specific organizations, primarily in the South Asia region” in the past. Multiple Sophos Firewall versions received hotfixes […]

The post <strong>Over 4,000 Internet-facing Sophos Firewalls Vulnerable to Code Injection Attacks</strong> appeared first on GBHackers – Latest Cyber Security News | Hacker News.