CVE-2022-1040
Sophos Sfos ≤ 18.5.3
Raw vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.
Summary
CVE-2022-1040 is a critical-severity an unspecified weakness vulnerability in Sophos Sfos. Its CVSS base score is 9.8 (Critical).
Operationally, ranked in the top 0.0% of CVEs by exploit likelihood; CISA has added it to the Known Exploited Vulnerabilities catalog; a public proof-of-concept is referenced.
Deeper analysis AI-assisted summary
Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.
An authentication bypass vulnerability affects the User Portal and Webadmin components of Sophos Firewall in version v18.5 MR3 and older. Tracked as CVE-2022-1040, the flaw received a CVSS 3.1 base score of 9.8 reflecting network attack vector, low complexity, and no required privileges or user interaction, resulting in full impact to confidentiality, integrity, and availability.
Unauthenticated remote attackers can exploit the weakness to bypass authentication controls and execute arbitrary code on the firewall. Public proof-of-concept code has been posted to Exploit-DB and PacketStorm, enabling straightforward remote code execution against exposed management interfaces.
The vendor published an advisory detailing the issue. The associated EPSS score reached a peak of 0.9750 and remains at 0.9444, reflecting sustained exploitation interest after disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-24387
Vulnerability Data
An authentication bypass vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v18.5 MR3 and older.
- CWE(s)
- KEV Date Added
- 31 March 2022
Related Threats
CVEs Like This One
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.