CVE-2022-3236 CISA KEV · Actively exploited
Code injection in Sophos Firewall
CVSS score
9.8
EPSS probability
%98.9
Risk score
19.4
Published
4 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
Nuclei: Sophos Firewall <= 19.0 MR1 - Remote Code Execution
Makefile Go / Python
Similar Vulnerabilities
9.8
CVE-2020-29574 Actively exploitedVulnerability in N/a
WorkaroundEPSS %5
9.3
CVE-2026-18367Vulnerability in Sophos Endpoint For macOS
Patch status unknownEPSS %0
-
CVE-2023-1671 Actively exploitedSophos Web Appliance Command Injection Vulnerability
Workaround Public Exploits:6EPSS %100
-
CVE-2022-1040 Actively exploitedSophos Firewall Authentication Bypass Vulnerability
Workaround Public Exploits:8EPSS %100
-
CVE-2020-25223 Actively exploitedSophos SG UTM Remote Code Execution Vulnerability
Workaround Public Exploits:2EPSS %97
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2022-3236"