[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f6uXDUkEk4rvMm5zcU3VWw7B-07_57WuOs3f3GXLXNz4":3,"g5a-risk:CVE-2022-1040":129},{"success":4,"data":5,"meta":127},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":45,"epssPercentile":26,"epssTimeSeries":46,"severity":47,"affectedProducts":48,"affectedProductsCount":54,"references":55,"referencesCount":84,"weaknesses":85,"weaknessesCount":54,"isActivelyExploited":4,"cisaInfo":89,"otxData":26,"relatedBlogPosts":90,"seoMetadata":91,"configurations":116,"relatedVendorCves":125,"notableEvents":126},"CVE-2022-1040","What is CVE-2022-1040?","An authentication bypass vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v18.5 MR3 and older.","2022-03-25T12:15:07.75","2025-10-27T17:01:03.883",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":14,"CVSSMetricV30":33,"CVSSMetricV2":34,"CVSSMetricV40":26},[15,29],{"Source":16,"Type":17,"CVSSData":18,"ExploitabilityScore":27,"ImpactScore":28},"security-alert@sophos.com","Secondary",{"Version":19,"VectorString":12,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":22,"UserInteraction":22,"Scope":23,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":11,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":19,"VectorString":12,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":22,"UserInteraction":22,"Scope":23,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":11,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},[],[35],{"Source":30,"Type":31,"CVSSData":36,"BaseSeverity":24,"ExploitabilityScore":42,"ImpactScore":43,"ACInsufInfo":44,"ObtainAllPrivilege":44,"ObtainUserPrivilege":44,"ObtainOtherPrivilege":44,"UserInteractionRequired":44},{"Version":37,"VectorString":38,"AccessVector":20,"AccessComplexity":21,"Authentication":22,"ConfidentialityImpact":39,"IntegrityImpact":39,"AvailabilityImpact":39,"BaseScore":40,"BaseSeverity":41,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,"",10,6.4,false,0.99796,[45,45,45,45,45,45,45],"Critical",[49],{"vendor":50,"product":51,"version":52,"criteria":53,"vulnerable":4},"sophos","sfos","*","cpe:2.3:o:sophos:sfos:*:*:*:*:*:*:*:*",1,[56,63,67,73,75,77,79],{"url":57,"source":58,"tags":59},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F168046\u002FSophos-XG115w-Firewall-17.0.10-MR-10-Authentication-Bypass.html","Packetstormsecurity",[60,61,62],"Exploit","Third Party Advisory","VDB Entry",{"url":64,"source":65,"tags":66},"https:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F51006","Exploit-db",[60,61,62],{"url":68,"source":69,"tags":70},"https:\u002F\u002Fwww.sophos.com\u002Fen-us\u002Fsecurity-advisories\u002Fsophos-sa-20220325-sfos-rce","Sophos",[71,72],"Mitigation","Vendor Advisory",{"url":57,"source":58,"tags":74},[60,61,62],{"url":64,"source":65,"tags":76},[60,61,62],{"url":68,"source":69,"tags":78},[71,72],{"url":80,"source":81,"tags":82},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2022-1040","CISA",[83],"US Government Resource",7,[86],{"id":87,"name":87,"description":88},"Unknown","NVD-CWE-noinfo",{"shortDescription":41,"requiredAction":41,"vulnerabilityName":41,"dateAdded":26},[],{"title":92,"metaDescription":93,"keywords":94,"canonicalUrl":95,"structuredData":96},"What is CVE-2022-1040? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-1040, a critical severity cyber security vulnerability from 2022. High exploit probability (99.8%). An authentication bypa...","CVE-2022-1040, CVE-2022-1040 vulnerability, CVE-2022-1040 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, sophos security, sfos vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2022-1040",{"@context":97,"@type":98,"headline":92,"description":93,"datePublished":9,"dateModified":10,"author":99,"publisher":103,"about":107,"mainEntityOfPage":111,"articleSection":114,"keywords":115},"https:\u002F\u002Fschema.org","TechArticle",{"@type":100,"name":101,"url":102},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":100,"name":101,"url":102,"logo":104},{"@type":105,"url":106},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":108,"name":6,"description":109,"additionalType":110},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":112,"@id":113},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-1040","Cybersecurity","CVE-2022-1040, CVE-2022-1040 vulnerability, CVE-2022-1040 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[117],{"Operator":26,"Negate":26,"Nodes":118},[119],{"Operator":120,"Negate":44,"CPEMatch":121},"OR",[122],{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":123,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":124},"607A3F0A-C405-4A38-8766-4C79C62E9671","18.5.3",[],[],{"lastModified":10,"cacheTime":128,"version":37},1792333056537,{"score":130,"band":47,"action":131,"scoredAt":132},90,"Emergency patch","2026-10-16T06:53:57.307016+00:00"]