CVE-2024-12727

A pre-auth SQL injection vulnerability in the email protection feature of Sophos Firewall versions older than 21.0 MR1 21.0.1 allows access to the reporting database and can lead to remote code execution if a specific configuration of Secure PDF eXchange SPX is enabled in combination with the...

CVE-2024-12727

A pre-auth SQL injection vulnerability in the email protection feature of Sophos Firewall versions older than 21.0 MR1 21.0.1 allows access to the reporting database and can lead to remote code execution if a specific configuration of Secure PDF eXchange SPX is enabled in combination with the...

CVE-2024-12727

creationtimestamp| type| source ---|---|--- 2024-12-19 20:32:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113681389646115127 2024-12-19 21:15:36+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldos5xymum2s 2024-12-19 23:11:05+00:00| seen|...

CVE-2024-12727

A pre-auth SQL injection vulnerability in the email protection feature of Sophos Firewall versions older than 21.0 MR1 21.0.1 allows access to the reporting database and can lead to remote code execution if a specific configuration of Secure PDF eXchange SPX is enabled in combination with the...

CVE-2024-12727

CVE-2024-12727 is a pre-auth SQL injection affecting Sophos Firewall’s email protection feature on versions older than 21.0 MR1 (21.0.1). The underlying issue can allow access to the reporting database and, in combination with a specific Secure PDF eXchange (SPX) configuration and HA mode, may le...