Sophos Firewall vulnerable to critical remote code execution flaw

Sophos has recently issued a security advisory addressing three critical vulnerabilities in its Sophos Firewall products. These vulnerabilities could be exploited to achieve remote code execution and allow privileged system access under certain conditions123. The vulnerabilities are as follows:

1. Remote Code Execution: The vulnerabilities could allow remote unauthenticated threat actors to perform SQL injection and remote code execution, as well as gain privileged SSH access123.
2. Severity: Two of the three vulnerabilities are rated Critical in severity23.
3. Exploitation: There is currently no evidence that these shortcomings have been exploited in the wild23.
4. Fixes: Sophos has released hotfixes to address these vulnerabilities, ensuring that users can update their systems to prevent exploitation123.

Detailed Context

• Vulnerability Details: The vulnerabilities were identified in Sophos Firewall products and could be exploited through various means, including SQL injection and remote code execution123.
• CVE IDs: Although specific CVE IDs are not mentioned in the sources, the vulnerabilities are described as critical and capable of remote code execution123.
• Sophos Response: Sophos has taken immediate action by releasing hotfixes to address these vulnerabilities, ensuring that users can update their systems to prevent exploitation123.

Trustworthy Citations

• Cyber Newsroom Feed: "Sophos has released hotfixes to address three security flaws in Sophos Firewall products that could be exploited to achieve remote code execution and allow privileged system access under certain conditions. Of the three, two are rated Critical in severity. There is currently no evidence that the shortcomings have been exploited in the wild"1.
• Western Illinois University Cybersecurity Center: "Sophos has released hotfixes to address three security flaws in Sophos Firewall products that could be exploited to achieve remote code execution and allow privileged system access under certain conditions. Of the three, two are rated Critical in severity. There is currently no evidence that the shortcomings have been exploited in the wild"2.
• Galileo Systems Group: "Sophos has released hotfixes to address three security flaws in Sophos Firewall products that could be exploited to achieve remote code execution and allow privileged system access under certain conditions. Of the three, two are rated Critical in severity. There is currently no evidence that the shortcomings have been exploited in the wild"3.

These sources provide comprehensive and reliable information on the latest Sophos Firewall vulnerability and the steps taken by Sophos to address it.