Sophos fixed critical vulnerabilities in its Firewall product
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2020-12271 | SQL Injection RCE in Sophos SFOS Firewalls with WAN-Exposed Admin or User Portal | 9.8 | 42% | KEVRansomwarePoC | KEV |
CVE-2024-12727+2 related CVEs | A pre-auth SQL injection vulnerability in the email protection feature of Sophos Firewall versions older than 21.0 MR1 (21.0.1) allows access to the reporting… | 9.8 group max | 1% |
From the original article
3 min read at securityaffairs.com
Sophos fixed three Sophos Firewall flaws that could lead to SQL injection, privileged SSH access to devices, and remote code execution. Sophos has addressed three vulnerabilities, respectively tracked as CVE-2024-12727, CVE-2024-12728, and CVE-2024-12729, in its Sophos Firewall solution. The vulnerabilities impact Sophos Firewall v21.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.