SQL injection vulnerability and malicious code execution in XG Firewall/SFM

Hi Sophos User837 

SFM is not impacted. Sophos commenced an investigation and the incident was determined to be an attack against physical and virtual XG Firewall units.

More information here: https://community.sophos.com/kb/en-us/135412

Regards,

After analyzing the components and intent of the attack, Sophos published a SophosLabs Uncut article, “Asnarok” Trojan targets firewalls, to share its current understanding of the malware.

After analyzing the components and intent of the attack, Sophos published a SophosLabs Uncut article, “Asnarok” Trojan targets firewalls, to share its current understanding of the malware.