Share
## https://sploitus.com/exploit?id=385660CE-C47F-5426-B0A7-31DB1FD7E564
# CVE-2022-1040-sophos-rce-poc
# sophos rce poc
sophos webmin portal auth bypass and rce all in one script;
The vulnerability affects Sophos Firewall v18.5 MR3 (18.5.3) and older

# Mitigation:
update to latest version asap
https://support.sophos.com/support/s/article/KB-000043853?language=en_US

to avoid misusing of this script its not for free:
it contains the script and a freshly dumped ip list ~190k from shodan with probably high number of vulnerable targets.
happy hunting...
https://satoshidisk.com/pay/CFMPjW