CVE-2022-3696 in Sophos

摘要

由 MITRE • 2022-12-01

A post-auth code injection vulnerability allows admins to execute code in Webadmin of Sophos Firewall older than version 19.5 GA.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• 负责: Sophos Limited
• 预定: 2022-10-26
• 披露: 2022-12-01
• 管理: 已接受
• 条目: VDB-214662
• CPE: 准备好
• CWE: CWE-94 (已确认)
• CVSS: 7.2 (NVD)
• EPSS: 0.01102
• KEV: 否
• 活动: 非常低
• 部门: Education, Hostingprovider, ...

来源

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-3696
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-3696
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-3696/