CVE-2022-0652: Sophos Unified Threat Management

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Confd log files contain local users', including root’s, SHA512crypt password hashes with insecure access permissions. This allows a local attacker to attempt off-line brute-force attacks against these password hashes in Sophos UTM before version 9.710.

Affected products

• Sophos Unified Threat Management: before 9.710 (fixed in 9.710)

Published 2022-03-22. Last modified 2026-06-17.