Description
Sophos XG Firewall 17.x through v17.5 MR12 allows a Buffer Overflow and remote code execution via the HTTP/S Bookmarks feature for clientless access. Hotfix HF062020.1 was published for all firewalls running v17.x.
Advisories 1
- WID-SEC-2025-0288 Sophos XG Firewall: Schwachstelle ermöglicht Codeausführung BSI CERT-Bund (WID) · Feb 6, 2025