CVE-2025-6704

🗓️ 21 Jul 2025 13:16:29Reported by SophosType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 50 Views

Arbitrary file writing vulnerability in Sophos Firewall can lead to remote code execution risk.

Reporter	Title	Published	Views	Family All 12
BDU FSTEC	The vulnerability of the Secure PDF eXchange (SPX) function of the Sophos Firewall (formerly known as Sophos XG Firewall) allows a hacker to execute arbitrary code.	17 Nov 202500:00	–	bdu_fstec
Circl	CVE-2025-6704	22 Jul 202513:48	–	circl
CNNVD	Sophos Firewall 安全漏洞	21 Jul 202500:00	–	cnnvd
Cvelist	CVE-2025-6704	21 Jul 202513:16	–	cvelist
EUVD	EUVD-2025-22086	3 Oct 202520:07	–	euvd
NVD	CVE-2025-6704	21 Jul 202514:15	–	nvd
OSV	CVE-2025-6704	21 Jul 202514:15	–	osv
Positive Technologies	PT-2025-30271 · Sophos · Sophos Firewall	21 Jul 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-6704	23 Jul 202513:24	–	redhatcve
The Hacker News	Sophos and SonicWall Patch Critical RCE Flaws Affecting Firewalls and SMA 100 Devices	24 Jul 202514:14	–	thn

NVD

Node

AND

sophos firewall_firmwareRange<21.0.2

sophos firewallMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "Sophos Firewall",
    "vendor": "Sophos",
    "versions": [
      {
        "lessThan": "21.0 MR2 (21.0.2)",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
sophos	www.sophos.com/en-us/security-advisories/sophos-sa-20250721-sfos-rce

17 Jun 2026 10:02Current

7.3High risk

Vulners AI Score7.3

CVSS 3.19.8

EPSS0.08185

SSVC

CWE-78