Name of the Vulnerable Software and Affected Versions:

Sophos Firewall versions prior to 21.0 MR2 (21.0.2)

Description:

A command injection vulnerability exists in the WebAdmin component of Sophos Firewall. This issue can allow adjacent attackers to achieve pre-authentication code execution on High Availability (HA) auxiliary devices when One-Time Password (OTP) authentication is enabled for the admin user.

Recommendations:

Update Sophos Firewall to version 21.0 MR2 (21.0.2) or later.