PT-2024-9753 · Sophos · Sophos Firewall

Published

2024-12-19

·

Updated

2025-11-12

·

CVE-2024-12728

CVSS v3.1

10

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Sophos Firewall versions prior to 20.0 MR3 (20.0.3)
Description A weak credentials vulnerability potentially allows privileged system access via SSH to Sophos Firewall. This issue could let an attacker gain unauthorized access to protected information through SSH.
Recommendations For Sophos Firewall versions prior to 20.0 MR3 (20.0.3), update to version 20.0 MR3 (20.0.3) or later to resolve the issue. As a temporary workaround, consider restricting SSH access to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-1391

Related Identifiers

BDU:2024-11490
CVE-2024-12728

Affected Products

Sophos Firewall