High severity7.1NVD Advisory· Published Oct 18, 2023· Updated Jun 17, 2026

CVE-2023-5552

Description

A password disclosure vulnerability in the Secure PDF eXchange (SPX) feature allows attackers with full email access to decrypt PDFs in Sophos Firewall version 19.5 MR3 (19.5.3) and older, if the password type is set to “Specified by sender”.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Sophos/Firewall
cpe:2.3:a:sophos:firewall:*:*:*:*:*:*:*:*
Range: <=19.5.3
Sophos/Secure PDF eXchangellm-create
Range: <=19.5 MR3 (19.5.3)
Sophos/Sophos Firewallllm-fuzzy2 versions
<=19.5 MR3 (19.5.3)+ 1 more
- (no CPE)range: <=19.5 MR3 (19.5.3)
- (no CPE)range: 19.5.4

Patches

Vulnerability mechanics

References

www.sophos.com/en-us/security-advisories/sophos-sa-20231017-spx-passwordnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.461
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000