- Vendor / Project
- Sophos
- Product
- Firewall
- Date added
- Mar 31, 2022
- Due date
- Apr 21, 2022
- Known ransomware use
- Unknown
- CWEs
- CWE-158
Description
An authentication bypass vulnerability in User Portal and Webadmin of Sophos Firewall allows for remote code execution.
Required action
Apply updates per vendor instructions.