Security Advisory

CVE-2024-13974

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-07-21 13:34:11

Last updated 2025-07-21 15:00:59

Assigner Sophos

CVSS score not scored

State PUBLISHED

Description

A business logic vulnerability in the Up2Date component of Sophos Firewall older than version 21.0 MR1 (20.0.1) can lead to attackers controlling the firewall’s DNS environment to achieve remote code execution.

← Browse all CVEs View on cve.org ↗