CVE-2022-1040 PoC — Sophos Firewall 授权问题漏洞

Description

New exploitation of 2020 Sophos vuln

介绍

# CVE-2022-1040-sophos-rce-poc
# sophos rce poc
sophos webmin portal auth bypass and rce all in one script;
The vulnerability affects Sophos Firewall v18.5 MR3 (18.5.3) and older

# Mitigation:
update to latest version asap
https://support.sophos.com/support/s/article/KB-000043853?language=en_US

to avoid misusing of this script its not for free:
it contains the script and a freshly dumped ip list ~190k from shodan with probably high number of vulnerable targets.
happy hunting...
https://satoshidisk.com/pay/CFMPjW

文件快照

备注