Home/Product/sophos firewall firmware
Product

sophos firewall firmware

10 known vulnerabilities across versions
Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.
CVE-2025-7624
< 21.0.2
An SQL injection vulnerability in the legacy (transparent) SMTP proxy of Sophos Firewall versions older than 21.0 MR2 (21.0.2) can
9.8CRITICAL
CVE-2025-7382
< 21.0.2
A command injection vulnerability in WebAdmin of Sophos Firewall versions older than 21.0 MR2 (21.0.2) can lead to adjacent attac
8.8HIGH
CVE-2025-6704
< 21.0.2
An arbitrary file writing vulnerability in the Secure PDF eXchange (SPX) feature of Sophos Firewall versions older than 21.0 MR2 (
9.8CRITICAL
CVE-2024-13974
< 21.0.1
A business logic vulnerability in the Up2Date component of Sophos Firewall older than version 21.0 MR1 (20.0.1) can lead to attack
8.1HIGH
CVE-2024-13973
< 21.0.1
A post-auth SQL injection vulnerability in WebAdmin of Sophos Firewall versions older than 21.0 MR1 (21.0.1) can potentially lead
6.8MEDIUM
CVE-2024-12729
< 21.0.1
A post-auth code injection vulnerability in the User Portal allows authenticated users to execute code remotely in Sophos Firewall
8.8HIGH
CVE-2024-12728
< 20.0.3
A weak credentials vulnerability potentially allows privileged system access via SSH to Sophos Firewall older than version 20.0 MR
9.8CRITICAL
CVE-2024-12727
< 21.0.1
A pre-auth SQL injection vulnerability in the email protection feature of Sophos Firewall versions older than 21.0 MR1 (21.0.1) al
9.8CRITICAL
CVE-2021-25268
< 19.0
Multiple XSS vulnerabilities in Webadmin allow for privilege escalation from MySophos admin to SFOS admin in Sophos Firewall older
8.4HIGH
CVE-2021-25267
< 19.0
Multiple XSS vulnerabilities in Webadmin allow for privilege escalation from admin to super-admin in Sophos Firewall older than ve
6.8MEDIUM
threatengine.sh