Public
- Public
- Network
- Groups
- Featured
- Popular
- People

Conversation

Notices

Embed this notice
screaminggoat (screaminggoat@infosec.exchange)'s status on Saturday, 21-Dec-2024 01:37:48 JST screaminggoat
Sophos security advisory 19 December 2024: Resolved Multiple Vulnerabilities in Sophos Firewall (CVE-2024-12727, CVE-2024-12728, CVE-2024-12729)
- CVE-2024-12727 (9.8 critical) pre-auth SQL injection vulnerability in the email protection feature of Sophos Firewall
- CVE-2024-12728 (9.8 critical) weak credentials vulnerability potentially allows privileged system access via SSH to Sophos Firewall
- CVE-2024-12729 (8.8 high) post-auth code injection vulnerability in the User Portal allows authenticated users to execute code remotely in Sophos Firewall
Sophos has not observed these vulnerabilities to be exploited at this time.
#sophos #firewall #vulnerability #cve #infosec #cybersecurity
In conversation about 4 months ago from infosec.exchange permalink

Feeds