CVE-2022-1040 CISA KEV · Actively exploited
Sophos Firewall Authentication Bypass Vulnerability
CVSS score
—
EPSS probability
%99.8
Risk score
—
Published
4 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
Sophos XG115w Firewall 17.0.10 MR-10 - Authentication Bypass
Makefile Go / Python
Nuclei: Sophos Firewall <=18.5 MR3 - Remote Code Execution
Makefile Go / Python
GitHub
This vulnerability allows an attacker to gain unauthorized access to the firewall management space by bypassing authentication
Makefile Go / Python
Similar Vulnerabilities
9.8
CVE-2022-3236 Actively exploitedCode injection in Sophos Firewall
Workaround Public Exploits:1EPSS %99
9.8
CVE-2020-29574 Actively exploitedVulnerability in N/a
WorkaroundEPSS %5
9.3
CVE-2026-18367Vulnerability in Sophos Endpoint For macOS
Patch status unknownEPSS %0
-
CVE-2023-1671 Actively exploitedSophos Web Appliance Command Injection Vulnerability
Workaround Public Exploits:6EPSS %100
-
CVE-2020-25223 Actively exploitedSophos SG UTM Remote Code Execution Vulnerability
Workaround Public Exploits:2EPSS %97
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2022-1040"