Skip to content
NewA calmer, faster ZeroHour
Vulnerability3

CVE-2024-13973

CVSS 3.1
7.2 high
EPSS
9%p95
Published
·
Modified
Analyze CVE-2024-13973 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

A post-auth SQL injection vulnerability in WebAdmin of Sophos Firewall versions older than 21.0 MR1 (21.0.1) can potentially lead to administrators achieving arbitrary code execution.

Vendors
sophos
Products
firewall firmware
Weakness
CWE-89
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (9.2%)

In the news

2 stories