CVE-2024-12728

🗓️ 19 Dec 2024 20:48:53Reported by SophosType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 65 Views

Weak credentials flaw may allow SSH access to Sophos Firewall before version 20.0 MR3.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2024-12728	19 Dec 202420:52	–	circl
CNNVD	Sophos Firewall 安全漏洞	19 Dec 202400:00	–	cnnvd
Cvelist	CVE-2024-12728	19 Dec 202420:48	–	cvelist
EUVD	EUVD-2024-51076	3 Oct 202520:07	–	euvd
NVD	CVE-2024-12728	19 Dec 202421:15	–	nvd
OSV	CVE-2024-12728	19 Dec 202421:15	–	osv
Positive Technologies	PT-2024-9753	19 Dec 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-12728	5 Feb 202510:22	–	redhatcve
The Hacker News	⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips	23 Dec 202412:14	–	thn
The Hacker News	Sophos Issues Hotfixes for Critical Firewall Flaws: Update to Prevent Exploitation	20 Dec 202408:13	–	thn

NVD

Node

sophos firewall_firmwareRange<20.0.3

AND

sophos firewallMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "Sophos Firewall",
    "vendor": "Sophos",
    "versions": [
      {
        "lessThan": "20.0 MR3 (20.0.3)",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]