Skip to content
OpenAdvisories
High · 8.1 CVE-2024-13974 EUVD-2024-54805GHSA-84xf-f99r-6prw

A business logic vulnerability in the Up2Date component of Sophos Firewall older than version 21.0 MR1 (20.0.1) can lead to attackers contr…

Published Jul 21, 2025 · Updated Jul 21, 2025 · Assigned by Sophos

Vendor: Sophos Product: Sophos Firewall Category: Network devices

Description

A business logic vulnerability in the Up2Date component of Sophos Firewall older than version 21.0 MR1 (20.0.1) can lead to attackers controlling the firewall’s DNS environment to achieve remote code execution.

Affected products

VendorProductAffectedFixed
Sophos Sophos Firewall < 21.0 MR1 (21.0.1) 21.0 MR1 (21.0.1)

Advisories 1

References