{"id":50168,"date":"2023-01-18T23:30:15","date_gmt":"2023-01-18T23:30:15","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/thousands-of-sophos-firewalls-still-vulnerable-out-there-to-hijacking\/"},"modified":"2023-01-18T23:30:15","modified_gmt":"2023-01-18T23:30:15","slug":"thousands-of-sophos-firewalls-still-vulnerable-out-there-to-hijacking","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/thousands-of-sophos-firewalls-still-vulnerable-out-there-to-hijacking\/","title":{"rendered":"Thousands of Sophos firewalls still vulnerable out there to hijacking"},"content":{"rendered":"

More than 4,000 public-facing Sophos firewalls remain vulnerable to a critical remote code execution bug disclosed last year and patched months later, according to security researchers.<\/p>\n

The flaw, CVE-2022-3236, had already been exploited as a zero-day when Sophos published<\/a> a security advisory about the vulnerability in September 2022. At the time, the vendor said<\/a> the hole had been abused to target “a small set of specific organizations, primarily in the South Asia region.” <\/p>\n

The vulnerability can be exploited to gain control of a device, which can then be commandeered to probe and attack the network or outside targets.<\/p>\n