CVE-2022-0331
An information disclosure vulnerability in Webadmin allows an unauthenticated remote attacker to read the device serial number in Sophos Firewall version v18.5 MR2 and older.
Date published : 2022-03-28
https://www.sophos.com/en-us/security-advisories/sophos-sa-20220328-sfos-18-5-3