CVE-2022-1040 Sophos XG Firewall Authentication bypass
Tags
attack-pattern: Data Javascript - T1059.007 Vulnerabilities - T1588.006
Show in Graph
Common Information
Type Value
UUID ce5a2753-8837-4c2b-9e9e-1119ed7a4f3a
Fingerprint a39cc1c14f26060c
Analysis status DONE
Considered CTI value 0
Text language
Published June 10, 2022, midnight
Added to db Jan. 18, 2023, 9:09 p.m.
Last updated Nov. 17, 2024, 12:58 p.m.
Headline CVE-2022-1040 Sophos XG Firewall Authentication bypass
Title CVE-2022-1040 Sophos XG Firewall Authentication bypass
Detected Hints/Tags/Attributes 28/1/15
Source URLs
Redirection Url
Details Source https://blog.viettelcybersecurity.com/cve-2022-1040-sophos-xg-firewall-authentication-bypass/
URL Provider
Details Provider Source level domain
Details viettelcybersecurity.com blog.viettelcybersecurity.com
Attributes
Details Type #Events CTI Value
Details CVE 36 
cve-2022-1040
Details Domain 1 
jsonobject.java
Details Domain 2 
arrays.stream
Details Domain 14 
attackerkb.com
Details Domain 12 
bishopfox.com
Details Domain 5 
codewhitesec.blogspot.com
Details File 6 
org.json
Details File 1 
jsonobject.java
Details File 24 
login.jsp
Details File 1 
sophos-xg-tale-of-unfortunate-re.html
Details IPv4 1 
10.10.10.15
Details IPv4 18 
10.10.10.1
Details Url 1 
https://attackerkb.com/topics/cdxl2nl3cr/cve-2022-1040
Details Url 1 
https://bishopfox.com/blog/json-interoperability-vulnerabilities
Details Url 1 
https://codewhitesec.blogspot.com/2020/07/sophos-xg-tale-of-unfortunate-re.html