Vulnerabilitycritical

Sophos and SonicWall Patch Critical RCE Flaws Affecting Firewalls and SMA 100 Devices

The Hacker Newsby @TheHackersNewsJul 24, 2025 · 14:14 UTC (Jul 24, 2025)3 min read2 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2025-6704 CVE-2025-7624 CVE-2025-7382 CVE-2024-13974 CVE-2024-13973 CVE-2025-40599

Tags: cve-2025-6704 cve-2025-7624 cve-2025-7382 cve-2024-13974 cve-2024-13973 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2025-6704 +4 related CVEs CVE-2025-7624 CVE-2025-7382 CVE-2024-13974 CVE-2024-13973	An arbitrary file writing vulnerability in the Secure PDF eXchange (SPX) feature of Sophos Firewall versions older than 21.0 MR2 (21.0.2) can lead to pre-auth…	9.8 group max	9%		Jul 21, 2025
CVE-2025-40599	An authenticated arbitrary file upload vulnerability exists in the SMA 100 series web management interface	9.1	13%		Jul 23, 2025

From the original article

3 min read at thehackernews.com

 Ravie Lakshmanan  Jul 24, 2025 Network Security / Vulnerability Sophos and SonicWall have alerted users of critical security flaws in Sophos Firewall and Secure Mobile Access (SMA) 100 Series appliances that could be exploited to achieve remote code execution. The two vulnerabilities impacting Sophos Firewall are listed below -

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.