We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
A business logic vulnerability in the Up2Date component of Sophos Firewall older than version 21.0 MR1 (20.0.1) can lead to attackers controlling the firewall’s DNS environment to achieve remote code execution.
Reserved 2025-07-14 | Published 2025-07-21 | Updated 2025-07-21 | Assigner SophosCWE-807 Reliance on Untrusted Inputs in a Security Decision
The UK's National Cyber Security Centre (NCSC)
www.sophos.com/...ity-advisories/sophos-sa-20250721-sfos-rce
Support options
