Skip to content
OpenAdvisories
Critical · 9.8 CVE-2025-6704 EUVD-2025-22086GHSA-5m7h-7mwc-924h

An arbitrary file writing vulnerability in the Secure PDF eXchange (SPX) feature of Sophos Firewall versions older than 21.0 MR2 (21.0.2) c…

Published Jul 21, 2025 · Updated Jul 21, 2025 · Assigned by Sophos

Vendor: Sophos Product: Sophos Firewall Category: Network devices

Description

An arbitrary file writing vulnerability in the Secure PDF eXchange (SPX) feature of Sophos Firewall versions older than 21.0 MR2 (21.0.2) can lead to pre-auth remote code execution, if a specific configuration of SPX is enabled in combination with the firewall running in High Availability (HA) mode.

Affected products

VendorProductAffectedFixed
Sophos Sophos Firewall < 21.0 MR2 (21.0.2) 21.0 MR2 (21.0.2)

Advisories 1

References