← Database

CVE-2022-3226

HIGH CVSS: 7.2 Published: 2022-12-01 Modified: 2026-06-17

Description

An OS command injection vulnerability allows admins to execute code via SSL VPN configuration uploads in Sophos Firewall releases older than version 19.5 GA.

Affected Platforms

Sophos Xg Firewall FirmwareSophos Xg Firewall

Weakness Type

CWE-78, CWE-78

References