Critical · 9.8 CVE-2024-12728 EUVD-2024-51076GHSA-wj5c-255p-6pwh

A weak credentials vulnerability potentially allows privileged system access via SSH to Sophos Firewall older than version 20.0 MR3 (20.0.3…

Published Dec 19, 2024 · Updated Dec 21, 2024 · Assigned by Sophos

Description

A weak credentials vulnerability potentially allows privileged system access via SSH to Sophos Firewall older than version 20.0 MR3 (20.0.3).

Vendor	Product	Affected	Fixed
Sophos	Sophos Firewall	< 20.0 MR3 (20.0.3)	20.0 MR3 (20.0.3)

CNA	v3.1	9.8
EUVD	v3.1	9.8