← All advisories

Critical severity9.8NVD Advisory· Published Dec 19, 2024· Updated Jun 17, 2026

CVE-2024-12728

CVE-2024-12728

Description

A weak credentials vulnerability potentially allows privileged system access via SSH to Sophos Firewall older than version 20.0 MR3 (20.0.3).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Sophos/Firewallcpe-rescue2 versions
0+ 1 more
- (no CPE)range: 0
- (no CPE)range: <20.0 MR3 (20.0.3)
Sophos/Firewall Firmware
cpe:2.3:o:sophos:firewall_firmware:*:*:*:*:*:*:*:*
Range: <20.0.3

Patches

Vulnerability mechanics

References

1

www.sophos.com/en-us/security-advisories/sophos-sa-20241219-sfos-rcenvdPatchVendor Advisory

News mentions

0

No linked articles in our index yet.