CVE-2024-12727 — Sophos / Sophos Firewall

CVE-2024-12727

Sophos / Sophos Firewall PUBLISHED

Description (CNA)

A pre-auth SQL injection vulnerability in the email protection feature of Sophos Firewall versions older than 21.0 MR1 (21.0.1) allows access to the reporting database and can lead to remote code execution if a specific configuration of Secure PDF eXchange (SPX) is enabled in combination with the firewall running in High Availability (HA) mode.

Affected (CNA)

Vendor / product	Versions
Sophos / Sophos Firewall	affected 0 before 21.0 MR1 (21.0.1)

CWE

CWE-89

References

https://www.sophos.com/en-us/security-advisories/sophos-sa-20241219-sfos-rce

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.