Vulnerability Details CVE-2024-13973
A post-auth SQL injection vulnerability in WebAdmin of Sophos Firewall versions older than 21.0 MR1 (21.0.1) can potentially lead to administrators achieving arbitrary code execution.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 19.0%
CVSS Severity
CVSS v3 Score 6.8
Products affected by CVE-2024-13973
-
cpe:2.3:h:sophos:firewall:-
-
cpe:2.3:o:sophos:firewall_firmware:-
-
cpe:2.3:o:sophos:firewall_firmware:19.0