CVE-2025-7624 — Sophos / Sophos Firewall

CVE-2025-7624

Sophos / Sophos Firewall PUBLISHED

Description (CNA)

An SQL injection vulnerability in the legacy (transparent) SMTP proxy of Sophos Firewall versions older than 21.0 MR2 (21.0.2) can lead to remote code execution, if a quarantining policy is active for Email and SFOS was upgraded from a version older than 21.0 GA.

Affected (CNA)

Vendor / product	Versions
Sophos / Sophos Firewall	affected 0 before 21.0 MR2 (21.0.2)

CWE

CWE-89

References

https://www.sophos.com/en-us/security-advisories/sophos-sa-20250721-sfos-rce

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.