Description
An information disclosure vulnerability in Webadmin allows an unauthenticated remote attacker to read the device serial number in Sophos Firewall version v18.5 MR2 and older.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Sophos | Sophos Firewall | unspecified – ≤ 18.5 MR2 | — |