{"id":31930,"date":"2023-01-19T00:35:43","date_gmt":"2023-01-19T00:35:43","guid":{"rendered":"https:\/\/mailinvest.blog\/index.php\/2023\/01\/19\/4000-buggy-sophos-firewalls-still-vulnerable-to-rce-flaw-the-register\/"},"modified":"2023-01-19T00:37:12","modified_gmt":"2023-01-19T00:37:12","slug":"4000-buggy-sophos-firewalls-still-vulnerable-to-rce-flaw-the-register","status":"publish","type":"post","link":"https:\/\/mailinvest.blog\/index.php\/2023\/01\/19\/4000-buggy-sophos-firewalls-still-vulnerable-to-rce-flaw-the-register\/","title":{"rendered":"4,000+ buggy Sophos firewalls still vulnerable to RCE flaw \u2022 The Register"},"content":{"rendered":"

<\/a>\n<\/p>\n

\n

Greater than 4,000 public-facing Sophos firewalls stay weak to a crucial distant code execution bug disclosed final yr and patched months later, in line with safety researchers.<\/p>\n

The flaw, CVE-2022-3236, had already been exploited as a zero-day when Sophos published<\/a> a safety advisory in regards to the vulnerability in September 2022. On the time, the seller said<\/a> the opening had been abused to focus on “a small set of particular organizations, primarily within the South Asia area.”\u00a0<\/p>\n

The vulnerability may be exploited to achieve management of a tool, which might then be commandeered to probe and assault the community or exterior targets.<\/p>\n

\n