Login Request a demo
XF
Product
XG Firewall Firmware
by Sophos · last CVE Dec 1, 2022
On CISA KEVExploited in the wild
9
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 2High 5Medium 1Low 1
Severity
All severities9Critical2High5Medium1Low1
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add XG Firewall Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-3713
8.8
1%
Dec 1
A code injection vulnerability allows adjacent attackers to execute code in the Wifi controller of Sophos Firewall releases older than version 19.5 GA
Affected: through 19.0
CVE-2020-17352
8.8
4%
Aug 7
Two OS command injection vulnerabilities in the User Portal of Sophos XG Firewall through 2020-08-05 potentially allow an authenticated attacker to remotely execute arbitrary code
Affected: 17.5; 17.5; 17.5; 17.5; 17.5; 17.5; +8 more
CVE-2022-3709
8.4
1%
Dec 1
A stored XSS vulnerability allows admin to super-admin privilege escalation in the Webadmin import group wizard of Sophos Firewall releases older than version 19.5 GA
Affected: through 19.0
CVE-2022-3696
7.2
1%
Dec 1
A post-auth code injection vulnerability allows admins to execute code in Webadmin of Sophos Firewall releases older than version 19.5 GA
Affected: through 19.0
CVE-2022-3226
7.2
2%
Dec 1
An OS command injection vulnerability allows admins to execute code via SSL VPN configuration uploads in Sophos Firewall releases older than version 19.5 GA
Affected: through 19.0
Showing 5