Vulnerability Description
An information disclosure vulnerability in Webadmin allows an unauthenticated remote attacker to read the device serial number in Sophos Firewall version v18.5 MR2 and older.
CVSS Score
5.3
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Sophos | Sfos | <= 18.5.2 |
References
- https://www.sophos.com/en-us/security-advisories/sophos-sa-20220328-sfos-18-5-3Vendor Advisory
- https://www.sophos.com/en-us/security-advisories/sophos-sa-20220328-sfos-18-5-3Vendor Advisory
FAQ
What is CVE-2022-0331?
CVE-2022-0331 is a vulnerability with a CVSS score of 5.3 (MEDIUM). An information disclosure vulnerability in Webadmin allows an unauthenticated remote attacker to read the device serial number in Sophos Firewall version v18.5 MR2 and older.
How severe is CVE-2022-0331?
CVE-2022-0331 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-0331?
Check the references section above for vendor advisories and patch information. Affected products include: Sophos Sfos.