CVE-2024-12729

published 2024-12-19

CVE-2024-12729: A post-auth code injection vulnerability in the User Portal allows authenticated users to execute code remotely in Sophos Firewall older than version 21.0 MR1…

Priority P3 56 high 8.8 CVSS 3.1

AV N AC L PR L UI N S U C H I H A H

A post-auth code injection vulnerability in the User Portal allows authenticated users to execute code remotely in Sophos Firewall older than version 21.0 MR1 (21.0.1).

Affected

2 ranges

Vendor	Product	Version range	Fixed in
sophos	firewall_firmware	< 21.0.1	21.0.1
sophos	sophos_firewall	< 21.0 MR1 (21.0.1)	21.0 MR1 (21.0.1)

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-94