Share
## https://sploitus.com/exploit?id=0AF1D985-5B2E-5629-AE02-3BAEDCDAE218
# CVE-2022-1040-sophos-rce-poc
# sophos rce poc
sophos webmin portal auth bypass and rce all in one script;
The vulnerability affects Sophos Firewall v18.5 MR3 (18.5.3) and older

# Mitigation:
update to latest version asap
https://support.sophos.com/support/s/article/KB-000043853?language=en_US

to avoid misusing of this script its not for free:
it contains the script and a freshly dumped ip list ~190k from shodan with probably high number of vulnerable targets.
happy hunting...
https://satoshidisk.com/pay/CFUPBb