Sophos and SonicWall Vulnerabilities

This report summarizes two critical firewall vulnerabilities: Sophos Firewall CVE-2022-1040 (authentication bypass in User Portal/Webadmin enabling possible remote code execution; hotfixes released and workaround of disabling WAN access recommended) and SonicWall CVE-2022-22247 (stack-based buffer overflow in the web management interface allowing DoS and potential RCE; patches/hotfixes available and vendor recommends restricting management access to trusted sources). Stakeholders are advised to verify and apply vendor hotfixes or implement the recommended access restrictions immediately.