CVE-2024-13974 — Sophos / Sophos Firewall

CVE-2024-13974

Sophos / Sophos Firewall PUBLISHED

Description (CNA)

A business logic vulnerability in the Up2Date component of Sophos Firewall older than version 21.0 MR1 (20.0.1) can lead to attackers controlling the firewall’s DNS environment to achieve remote code execution.

Affected (CNA)

Vendor / product	Versions
Sophos / Sophos Firewall	affected 0 before 21.0 MR1 (21.0.1)

CWE

CWE-807

References

https://www.sophos.com/en-us/security-advisories/sophos-sa-20250721-sfos-rce

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.