PT-2025-30270 · Sophos · Sophos Firewall

Published 2025-07-21 · Updated 2025-11-17 · CVE-2024-13974

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Sophos Firewall versions prior to 21.0 MR1 (20.0.1)

Description A business logic vulnerability exists in the Up2Date component of Sophos Firewall. This vulnerability could allow attackers to control the firewall’s DNS environment, potentially leading to remote code execution.

Recommendations Update Sophos Firewall to version 21.0 MR1 or later.

Fix

RCE

Weakness Enumeration

CWE-807

Related Identifiers

BDU:2025-12948

CVE-2024-13974

Affected Products

Sophos Firewall

References · 13

• https://sophos.com/en-us/security-advisories/sophos-sa-20250721-sfos-rce · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-13974 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-13974 · Security Note
• https://cve.org/CVERecord?id=CVE-2024-13974 · Security Note
• https://bdu.fstec.ru/vul/2025-12948 · Security Note
• https://twitter.com/CCBalert/status/1948978630442287527 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1947322975335670226 · Twitter Post
• https://t.me/cveNotify/143057 · Telegram Post
• https://reddit.com/r/Action1/comments/1mofh04/august_patch_tuesday_updates · Reddit Post
• https://t.me/cvenotify/129689 · Telegram Post
• https://t.me/true_secator/7266 · Telegram Post
• https://twitter.com/autumn_good_35/status/1947502171047796966 · Twitter Post
• https://twitter.com/CVEnew/status/1947300341172621341 · Twitter Post