CVE-2024-12729
8.8HIGHA post-auth code injection vulnerability in the User Portal allows authenticated users to execute code remotely in Sophos Firewall older than version 21.0 MR1 (21.0.1).
Published: 12/19/2024Updated: 11/12/2025
Description
A post-auth code injection vulnerability in the User Portal allows authenticated users to execute code remotely in Sophos Firewall older than version 21.0 MR1 (21.0.1).
AI AnalysisPowered by AI
Affected Products
sophosfirewall_firmware
sophosfirewall
-
References
- https://www.sophos.com/en-us/security-advisories/sophos-sa-20241219-sfos-rcePatchVendor Advisory