Beveiligingsadvies

CVE-2025-7382

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-07-21 13:28:38

Laatst bijgewerkt 2025-07-21 15:03:51

Toegewezen door Sophos

CVSS-score 8.8

Status PUBLISHED

Beschrijving

A command injection vulnerability in WebAdmin of Sophos Firewall versions older than 21.0 MR2 (21.0.2) can lead to adjacent attackers achieving pre-auth code execution on High Availability (HA) auxiliary devices, if OTP authentication for the admin user is enabled.

← Alle CVE's bekijken Bekijk op cve.org ↗