Skip to content
OpenAdvisories
Medium · 6.8 CVE-2024-13973 EUVD-2024-54804GHSA-jfx3-jv8f-g222

A post-auth SQL injection vulnerability in WebAdmin of Sophos Firewall versions older than 21.0 MR1 (21.0.1) can potentially lead to admini…

Published Jul 21, 2025 · Updated Jul 21, 2025 · Assigned by Sophos

Vendor: Sophos Product: Sophos Firewall Category: Network devices

Description

A post-auth SQL injection vulnerability in WebAdmin of Sophos Firewall versions older than 21.0 MR1 (21.0.1) can potentially lead to administrators achieving arbitrary code execution.

Affected products

VendorProductAffectedFixed
Sophos Sophos Firewall < 21.0 MR1 (21.0.1) 21.0 MR1 (21.0.1)

Advisories 1

References