---
id: 7355
title: "CVE-2022-1040 Sophos XG Firewall Authentication bypass"
cve: CVE-2022-1040
source_domain: blog.viettelcybersecurity.com
source_url: "https://blog.viettelcybersecurity.com/cve-2022-1040-sophos-xg-firewall-authentication-bypass/"
published_at: "2022-06-10T07:25:33Z"
tags: ["rce", "authentication-bypass", "sophos", "vulnerability-analysis", "firewall", "cve-2022-1040"]
phying_url: "https://phying.com/item/7355"
lang: en
---

# CVE-2022-1040 Sophos XG Firewall Authentication bypass

## Summary

Analysis of Sophos XG Firewall CVE-2022-1040: mapping its Apache-Jetty-CSC-Perl architecture and the patch, whose JSON filter strips non-printable characters, exposing the parsing flaw.

## Intelligence Metadata

- **Sources:** blog.viettelcybersecurity.com
- **CVE:** CVE-2022-1040
- **Published:** 2022-06-10T07:25:33Z
- **Original:** https://blog.viettelcybersecurity.com/cve-2022-1040-sophos-xg-firewall-authentication-bypass/
- **Phying News:** https://phying.com/item/7355