sophos

Hackers Exploited Zero-Day RCE Vulnerability in Sophos Firewall — Patch Released

Share:

Security software company Sophos has released a patch update for its firewall product after it was discovered that attackers were exploiting a new critical zero-day vulnerability to attack its customers’ network.

The issue, tracked as CVE-2022-3236 (CVSS score: 9.8), impacts Sophos Firewall v19.0 MR1 (19.0.1) and older and concerns a code injection vulnerability in the User Portal and Webadmin components that could result in remote code execution.

The company said it “has observed this vulnerability being used to target a small set of specific organizations, primarily in the South Asia region,” adding it directly notified these entities.

As a workaround, Sophos is recommending that users take steps to ensure that the User Portal and Webadmin are not exposed to WAN. Alternatively, users can update to the latest supported version –

  • 5 GA
  • 0 MR2 (19.0.2)
  • 0 GA, MR1, and MR1-1
  • 5 MR5 (18.5.5)
  • 5 GA, MR1, MR1-1, MR2, MR3, and MR4
  • 0 MR3, MR4, MR5, and MR6
  • 5 MR12, MR13, MR14, MR15, MR16, and MR17
  • 0 MR10

Users running older versions of Sophos Firewall are required to upgrade to receive the latest protections and the relevant fixes.

The development marks the second time a Sophos Firewall vulnerability has come under active attacks within a year. Earlier this March, another flaw (CVE-2022-1040) was used to target organizations in the South Asia region.

Then in June 2022, cybersecurity firm Volexity shared more details of the attack campaign, pinning the intrusions on a Chinese advanced persistent threat (APT) known as DriftingCloud.

Sophos firewall appliances have also previously come under attack to deploy what’s called the Asnarök trojan in an attempt to siphon sensitive information.

https://thehackernews.com/2022/09/hackers-actively-exploiting-new-sophos.html

Leave a Comment

Your email address will not be published. Required fields are marked *

loader-image
London, GB
1:20 pm, Feb 8, 2025
weather icon 5°C
L: 5° | H: 6°
drizzle
Humidity: 92 %
Pressure: 1018 mb
Wind: 9 mph ENE
Wind Gust: 0 mph
UV Index: 0
Precipitation: 0 mm
Clouds: 100%
Rain Chance: 0%
Visibility: 2 km
Sunrise: 7:27 am
Sunset: 5:02 pm
DailyHourly
Daily ForecastHourly Forecast
Today 9:00 pm
weather icon
5° | 6°°C 0 mm 0% 4 mph 92 % 1023 mb 0 mm/h
Tomorrow 9:00 pm
weather icon
3° | 5°°C 1 mm 100% 10 mph 97 % 1030 mb 0 mm/h
Mon Feb 10 9:00 pm
weather icon
3° | 4°°C 1 mm 100% 11 mph 96 % 1029 mb 1.38 mm/h
Tue Feb 11 9:00 pm
weather icon
3° | 4°°C 0.38 mm 38% 8 mph 97 % 1020 mb 0 mm/h
Wed Feb 12 9:00 pm
weather icon
4° | 6°°C 0 mm 0% 5 mph 92 % 1023 mb 0 mm/h
Today 3:00 pm
weather icon
6° | 6°°C 0 mm 0% 4 mph 92 % 1018 mb 0 mm/h
Today 6:00 pm
weather icon
5° | 5°°C 0 mm 0% 4 mph 86 % 1019 mb 0 mm/h
Today 9:00 pm
weather icon
4° | 4°°C 0 mm 0% 3 mph 81 % 1023 mb 0 mm/h
Tomorrow 12:00 am
weather icon
3° | 3°°C 0 mm 0% 3 mph 84 % 1024 mb 0 mm/h
Tomorrow 3:00 am
weather icon
3° | 3°°C 0 mm 0% 4 mph 87 % 1025 mb 0 mm/h
Tomorrow 6:00 am
weather icon
4° | 4°°C 0.29 mm 29% 7 mph 94 % 1026 mb 0 mm/h
Tomorrow 9:00 am
weather icon
4° | 4°°C 0.99 mm 99% 7 mph 97 % 1028 mb 0 mm/h
Tomorrow 12:00 pm
weather icon
4° | 4°°C 1 mm 100% 10 mph 96 % 1028 mb 0 mm/h
Name Price24H (%)
Bitcoin(BTC)
€93,118.42
-1.57%
Ethereum(ETH)
€2,526.10
-5.08%
Tether(USDT)
€0.97
-0.04%
XRP(XRP)
€2.33
0.48%
Solana(SOL)
€188.15
-1.92%
USDC(USDC)
€0.97
0.00%
Dogecoin(DOGE)
€0.240369
-2.07%
Shiba Inu(SHIB)
€0.000015
2.00%
Pepe(PEPE)
€0.000009
-2.26%
Scroll to Top