Skip to content
OpenAdvisories
High · 8.8 CVE-2025-7382 EUVD-2025-22084GHSA-848r-3x2j-g9jr

A command injection vulnerability in WebAdmin of Sophos Firewall versions older than 21.0 MR2 (21.0.2) can lead to adjacent attackers achie…

Published Jul 21, 2025 · Updated Jul 21, 2025 · Assigned by Sophos

Vendor: Sophos Product: Sophos Firewall Category: Network devices

Description

A command injection vulnerability in WebAdmin of Sophos Firewall versions older than 21.0 MR2 (21.0.2) can lead to adjacent attackers achieving pre-auth code execution on High Availability (HA) auxiliary devices, if OTP authentication for the admin user is enabled.

Affected products

VendorProductAffectedFixed
Sophos Sophos Firewall < 21.0 MR2 (21.0.2) 21.0 MR2 (21.0.2)

Advisories 1

References