Security Advisory

CVE-2025-7382

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-07-21 13:28:38

Last updated 2025-07-21 15:03:51

Assigner Sophos

CVSS score not scored

State PUBLISHED

Description

A command injection vulnerability in WebAdmin of Sophos Firewall versions older than 21.0 MR2 (21.0.2) can lead to adjacent attackers achieving pre-auth code execution on High Availability (HA) auxiliary devices, if OTP authentication for the admin user is enabled.

← Browse all CVEs View on cve.org ↗