SQL Injection Vulnerability in Sophos Firewall by Sophos
CVE-2024-13973

6.8MEDIUM

Key Information:

Vendor

Sophos
Status
Sophos Firewall
Vendor
CVE Published:
21 July 2025

What is CVE-2024-13973?

A post-auth SQL injection vulnerability exists in the WebAdmin interface of Sophos Firewall, versions prior to 21.0 MR1 (21.0.1). This flaw could allow authenticated attackers to perform unauthorized actions, such as executing arbitrary code, which poses a significant risk to the system's integrity and data security. It is crucial for users of affected versions to apply the necessary patches to protect their network infrastructure.

Affected Version(s)

Sophos Firewall 0 < 21.0 MR1 (21.0.1)

References

https://www.sophos.com/en-us/security-advisories/sophos-s...

CVSS V3.1

Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

The UK's National Cyber Security Centre (NCSC)
.
CVE-2024-13973 : SQL Injection Vulnerability in Sophos Firewall by Sophos