Security News > 2024 > December > Sophos Issues Hotfixes for Critical Firewall Flaws: Update to Prevent Exploitation

2024-12-20 08:13
Sophos has released hotfixes to address three security flaws in Sophos Firewall products that could be exploited to achieve remote code execution and allow privileged system access under certain conditions. Of the three, two are rated Critical in severity. There is currently no evidence that the shortcomings have been exploited in the wild. The list of vulnerabilities is as follows -
News URL
https://thehackernews.com/2024/12/sophos-fixes-3-critical-firewall-flaws.html
Related news
- Critical Deadline: Update Old .NET Domains Before January 7, 2025 to Avoid Service Disruption (source)
- CISA Flags Critical Flaws in Mitel and Oracle Systems Amid Active Exploitation (source)
- Critical SimpleHelp vulnerabilities fixed, update your server instances! (source)
- Critical Flaws in WGS-804HPT Switches Enable RCE and Network Exploitation (source)
- SonicWall Urges Immediate Patch for Critical CVE-2025-23006 Flaw Amid Likely Exploitation (source)
- Zyxel warns of bad signature update causing firewall boot loops (source)
- Ivanti Patches Critical Flaws in Connect Secure and Policy Secure – Update Now (source)