Over 4,000 Sophos Firewall Devices Vulnerable to RCE Attacks

Sophos disclosed this code injection flaw (CVE-2022-3236) found in the User Portal and Webadmin of Sophos Firewall in September and also released hotfixes for multiple versions (official fixes were issued three months later, in December 2022).