Vulnerability Details CVE-2024-13974
A business logic vulnerability in the Up2Date component of Sophos Firewall older than version 21.0 MR1 (20.0.1) can lead to attackers controlling the firewall’s DNS environment to achieve remote code execution.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 50.4%
CVSS Severity
CVSS v3 Score 8.1
Products affected by CVE-2024-13974
-
cpe:2.3:h:sophos:firewall:-
-
cpe:2.3:o:sophos:firewall_firmware:-
-
cpe:2.3:o:sophos:firewall_firmware:19.0