CVE-2024-13974

published 2025-07-21

CVE-2024-13974: A business logic vulnerability in the Up2Date component of Sophos Firewall older than version 21.0 MR1 (20.0.1) can lead to attackers controlling the…

Priority P3 59 high 8.1 CVSS 3.1

AV N AC H PR N UI N S U C H I H A H

A business logic vulnerability in the Up2Date component of Sophos Firewall older than version 21.0 MR1 (20.0.1) can lead to attackers controlling the firewall’s DNS environment to achieve remote code execution.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
sophos	firewall_firmware	< 21.0.1	21.0.1
sophos	sophos_firewall	< 21.0 MR1 (21.0.1)	21.0 MR1 (21.0.1)

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-807