CVE-2024-12727

CRITICAL

9.8

Description

A pre-auth SQL injection vulnerability in the email protection feature of Sophos Firewall versions older than 21.0 MR1 (21.0.1) allows access to the reporting database and can lead to remote code execution if a specific configuration of Secure PDF eXchange (SPX) is enabled in combination with the firewall running in High Availability (HA) mode.

Details CVE

Score CVSS v3.19.8

SeveriteCRITICAL

Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vecteur d'attaqueNETWORK

ComplexiteLOW

Privileges requisNONE

Interaction utilisateurNONE

Publie12/19/2024

Derniere modification11/12/2025

Sourcenvd

Observations honeypot0

Produits affectes

sophos:firewallsophos:firewall_firmware

Faiblesses (CWE)

CWE-89

References

https://www.sophos.com/en-us/security-advisories/sophos-sa-20241219-sfos-rce(security-alert@sophos.com)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.