CVE-2024-13974

8.1HIGH

A business logic vulnerability in the Up2Date component of Sophos Firewall older than version 21.0 MR1 (20.0.1) can lead to attackers controlling the firewall’s DNS environment to achieve remote code

게시됨: 7/21/2025업데이트됨: 11/17/2025
NVD에서 보기MITRE에서 보기

설명

A business logic vulnerability in the Up2Date component of Sophos Firewall older than version 21.0 MR1 (20.0.1) can lead to attackers controlling the firewall’s DNS environment to achieve remote code execution.

AI 분석AI 기반

영향받는 제품

sophosfirewall_firmware
sophosfirewall
-

참조