FI
Network Security
Firewall
On CISA KEVExploited in the wildRansomware-linked
14
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 6Medium 2Low 0
Watch
Add Firewall to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-3236 In wildKEV | 9.8 | Sep 23 | Sophos Firewall Code Injection Vulnerability Affected: through 18.5 MR4; through 19.0 MR1 |
| CVE-2022-1040 In wildKEV | 9.8 | Mar 25 | Sophos Firewall Authentication Bypass Vulnerability Affected: through 18.5 MR3 |
| CVE-2020-12271 RansomwareIn wildKEV | 9.8 | Apr 27 | Sophos SFOS SQL Injection Vulnerability Affected: 17.0; 17.1; 17.5; 18.0 |
| CVE-2024-12728 | 9.8 | Dec 19 | A weak credentials vulnerability potentially allows privileged system access via SSH to Sophos Firewall older than version 20.0 MR3 (20.0.3) Affected: before 20.0 MR3 (20.0.3) |
| CVE-2024-12727 | 9.8 | Dec 19 | A pre-auth SQL injection vulnerability in the email protection feature of Sophos Firewall versions older than 21.0 MR1 (21.0.1) allows access to the reporting database and can… Affected: before 21.0 MR1 (21.0.1) |
| CVE-2020-11503 | 9.8 | Jun 18 | A heap-based buffer overflow in the awarrensmtp component of Sophos XG Firewall v17.5 MR11 and older potentially allows an attacker to run arbitrary code remotely Affected: before 17.5; 17.5; 17.5; 17.5; 17.5; 17.5; +7 more |
| CVE-2024-12729 | 8.8 | Dec 19 | A post-auth code injection vulnerability in the User Portal allows authenticated users to execute code remotely in Sophos Firewall older than version 21.0 MR1 (21.0.1) Affected: before 21.0 MR1 (21.0.1) |
| CVE-2018-16117 | 8.8 | Jun 20 | A shell escape vulnerability in /webconsole/Controller in Admin Portal of Sophos XG firewall 17.0.8 MR-8 allow remote authenticated attackers to execute arbitrary OS commands via… Affected: through 17.0; 17.1; 17.1 |
| CVE-2018-16116 | 8.8 | Jun 20 | SQL injection vulnerability in AccountStatus.jsp in Admin Portal of Sophos XG firewall 17.0.8 MR-8 allow remote authenticated attackers to execute arbitrary SQL commands via the… Affected: 17.0.8 |
| CVE-2018-16118 | 8.1 | Jun 20 | A shell escape vulnerability in /webconsole/APIController in the API Configuration component of Sophos XG firewall 17.0.8 MR-8 allows remote attackers to execute arbitrary OS… Affected: through 16.0; 16.5; 17.0; 17.0.8; 17.1 |
| CVE-2023-5552 | 7.5 | Oct 18 | A password disclosure vulnerability in the Secure PDF eXchange (SPX) feature allows attackers with full email access to decrypt PDFs in Sophos Firewall version 19.5 MR3 (19.5.3)… Affected: through 19.5.3 |
| CVE-2022-1807 | 7.2 | Sep 7 | Multiple SQLi vulnerabilities in Webadmin allow for privilege escalation from admin to super-admin in Sophos Firewall older than version 18.5 MR4 and version 19.0 MR1 Affected: before 18.5; 18.5; 18.5; 18.5; 18.5; 18.5; +1 more |
| CVE-2017-18014 | 6.1 | Jan 12 | An NC-25986 issue was discovered in the Logging subsystem of Sophos XG Firewall with SFOS before 17.0.3 MR3 Affected: through 17.0; 17.0; 17.0; 17.0 |
| CVE-2022-0331 | 5.3 | Mar 29 | An information disclosure vulnerability in Webadmin allows an unauthenticated remote attacker to read the device serial number in Sophos Firewall version v18.5 MR2 and older Affected: through 18.5.2 |
Showing 14