Skip to content
OpenAdvisories
High · 8.8 CVE-2022-3713 EUVD-2022-43070GHSA-3rf2-rmw5-85x7

A code injection vulnerability allows adjacent attackers to execute code in the Wifi controller of Sophos Firewall releases older than vers…

Published Dec 1, 2022 · Updated Apr 24, 2025 · Assigned by Sophos

Vendor: Sophos Product: Sophos Firewall Category: Network devices

Description

A code injection vulnerability allows adjacent attackers to execute code in the Wifi controller of Sophos Firewall releases older than version 19.5 GA.

Affected products

VendorProductAffectedFixed
Sophos Sophos Firewall unspecified – < 19.5 GA, unspecified – < 19.0 MR2, unspecified – < 18.5 MR5 19.5 GA

Advisories 1

References