Pre-Authentication SQL Injection Vulnerability in Sophos Firewall
CVE-2024-12727
Key Information:
- Vendor
- Sophos
- Status
- Vendor
- CVE Published:
- 19 December 2024
Badges
Summary
CVE-2024-12727 presents a critical pre-authentication SQL injection vulnerability within the email protection feature of Sophos Firewall, specifically affecting versions prior to 21.0 MR1 (21.0.1). When exploited, this vulnerability allows an attacker to access the reporting database, providing a pathway for remote code execution, particularly under certain configurations of the Secure PDF eXchange (SPX) feature in conjunction with the firewall's High Availability (HA) mode. Organizations utilizing the affected versions are strongly advised to upgrade to prevent potential exploitation.
Affected Version(s)
Sophos Firewall 0 < 21.0 MR1 (21.0.1)
Get notified when SecurityVulnerability.io launches alerting ๐
Well keep you posted ๐ง
News Articles
References
CVSS V3.1
Timeline
- ๐พ
Exploit known to exist
- ๐ฐ
First article discovered by The Hacker News
Vulnerability published
Vulnerability Reserved