Sophos Firewall Vulnerabilities: Fixes in Place, But Are You Safe?
Sophos fixed critical vulnerabilities in its firewall product, preventing SQL injection, privileged SSH access, and remote code execution. These issues required no action for users with automatic hotfixes enabled. So, if your firewall’s been acting like a Swiss cheese, now it’s more like a tightly knit sweater.
Hot Take:
Sophos Firewall vulnerabilities: bringing SQL to the party, giving SSH a free-for-all, and letting remote code execution crash the bash! Sophos, the party planner, is here to fix the mess and avoid future gatecrashers.
Key Points:
- Sophos patched three critical vulnerabilities in its firewall product, impacting versions prior to 21.0 GA.
- The vulnerabilities included SQL injection, non-random SSH passphrase, and post-auth code injection.
- Automatic hotfixes are available for those with the default settings enabled.
- No known attacks exploiting these specific vulnerabilities have been reported yet.
- Previous Sophos firewall incidents involved a Chinese national hacking 81,000 devices back in 2020.
Already a member? Log in here