Beveiligingsadvies

CVE-2025-6704

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-07-21 13:16:29

Laatst bijgewerkt 2025-07-21 15:07:07

Toegewezen door Sophos

CVSS-score 9.8

Status PUBLISHED

Beschrijving

An arbitrary file writing vulnerability in the Secure PDF eXchange (SPX) feature of Sophos Firewall versions older than 21.0 MR2 (21.0.2) can lead to pre-auth remote code execution, if a specific configuration of SPX is enabled in combination with the firewall running in High Availability (HA) mode.

← Alle CVE's bekijken Bekijk op cve.org ↗