60
Vulnerability3 · 1 read
CVE-2025-6704
- CVSS 3.1
- 9.8 critical
- EPSS
- 9%p95
- Published
- ·
- Modified
Description · NVD
An arbitrary file writing vulnerability in the Secure PDF eXchange (SPX) feature of Sophos Firewall versions older than 21.0 MR2 (21.0.2) can lead to pre-auth remote code execution, if a specific configuration of SPX is enabled in combination with the firewall running in High Availability (HA) mode.
- Vendors
- sophos
- Products
- firewall firmware
- Weakness
- CWE-78
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H