Loading
Loading
We use strictly necessary cookies to run this site, and analytics cookies to understand how it's used. See our Privacy Policy for details.
Sophos, SFOS
Description
Sophos Firewall operating system (SFOS) firmware contains a SQL injection vulnerability when configured with either the administration (HTTPS) service or the User Portal is exposed on the WAN zone. Successful exploitation may cause remote code execution to exfiltrate usernames and hashed passwords for the local device admin(s), portal admins, and user accounts used for remote access (but not external Active Directory or LDAP passwords).
CVSS severity for this advisory hasn't been enriched from NVD yet, check back shortly.
EPSS, exploit probability
High42.4%
estimated chance of real-world exploitation in the next 30 days, higher than 98.7% of every CVE FIRST.org scores
Refreshed 10/28/2026, via FIRST.org's EPSS model, not CVSS, this measures likelihood of exploitation, not how severe it would be.
Required action
Apply updates per vendor instructions.
CISA-recommended due date: 2022-05-03
We help organizations confirm real exposure and prioritize what actually needs fixing first.