High WID-SEC-2025-1615 5 CVEs

Sophos Firewall: Mehrere Schwachstellen ermöglichen Codeausführung

Published Jul 21, 2025 · Updated Jul 21, 2025 · de-DE

Vendor: Sophos Product: Firewall

Summary

Ein Angreifer kann mehrere Schwachstellen in Sophos Firewall ausnutzen, um beliebigen Programmcode auszuführen.

Product

Sophos Firewall ist die Firewall-Software für Sophos Appliances.

Vulnerabilities 5

Critical 9.8

CVE-2025-6704 EPSS 12%

An arbitrary file writing vulnerability in the Secure PDF eXchange (SPX) feature of Sophos Firewall versions older than…

Sophos Sophos Firewall Network devices

Jul 21, 2025
Critical 9.8

CVE-2025-7624 EPSS 11%

An SQL injection vulnerability in the legacy (transparent) SMTP proxy of Sophos Firewall versions older than 21.0 MR2 (…

Sophos Sophos Firewall Network devices

Jul 21, 2025
High 8.8

CVE-2025-7382

A command injection vulnerability in WebAdmin of Sophos Firewall versions older than 21.0 MR2 (21.0.2) can lead to adja…

Sophos Sophos Firewall Network devices

Jul 21, 2025
High 8.1

CVE-2024-13974

A business logic vulnerability in the Up2Date component of Sophos Firewall older than version 21.0 MR1 (20.0.1) can lea…

Sophos Sophos Firewall Network devices

Jul 21, 2025
Medium 6.8

CVE-2024-13973 EPSS 12%

A post-auth SQL injection vulnerability in WebAdmin of Sophos Firewall versions older than 21.0 MR1 (21.0.1) can potent…

Sophos Sophos Firewall Network devices

Jul 21, 2025

Revision history

2025-07-21 #1
Initiale Fassung

References

Sophos Security Advisory vom 2025-07-21
https://www.sophos.com/en-us/security-advisories/sophos-sa-20250721-sfos-rce