A code injection vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v19.0 MR1 and older.
https://www.sophos.com/en-us/security-advisories/sophos-sa-20220923-sfos-rce
Source: MITRE
Published: 2022-09-23
Updated: 2022-09-28
Type: CWE-74