CVE-2024-12729
19.12.2024, 21:15
A post-auth code injection vulnerability in the User Portal allows authenticated users to execute code remotely in Sophos Firewall older than version 21.0 MR1 (21.0.1).
| Vendor | Product | Version |
|---|---|---|
| sophos | firewall_firmware | 𝑥 < 21.0.1 |
𝑥
= Vulnerable software versions