CVE-2022-1807 | SynScan

Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2022-1807

Multiple SQLi vulnerabilities in Webadmin allow for privilege escalation from admin to super-admin in Sophos Firewall older than version 18.5 MR4 and version 19.0 MR1.

Published: Sep 7, 2022
Updated: Apr 14, 2023
CVE: CVE-2022-1807
Severity: High
Exploit:

CVSS v3:

Severity: High
Score: 7.2
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWEs:

CWE-89

OWASP TOP 10:

A1 - Injection

Affected Software
References

Software	From	Fixed in
sophos / firewall	19.0	19.0.x
sophos / firewall	18.5	18.5.x
sophos / firewall	18.5-mr1-1	18.5-mr1-1.x
sophos / firewall	18.5-mr2	18.5-mr2.x
sophos / firewall	18.5-mr3	18.5-mr3.x
sophos / firewall	18.5-mr1	18.5-mr1.x
sophos / firewall	-	18.5