Sophos and SonicWall Patch Critical RCE Flaws Affecting Firewalls and SMA 100 Devices

Sophos and SonicWall have alerted users of critical security flaws in Sophos Firewall and Secure Mobile Access SMA 100 Series appliances that could be exploited to achieve remote code execution. The two vulnerabilities impacting Sophos Firewall are listed below - CVE-2025-6704 CVSS score: 9.8 - A...

CVE-2025-6704

An arbitrary file writing vulnerability in the Secure PDF eXchange SPX feature of Sophos Firewall versions older than 21.0 MR2 21.0.2 can lead to pre-auth remote code execution, if a specific configuration of SPX is enabled in combination with the firewall running in High Availability HA mode...

CVE-2025-6704

creationtimestamp| type| source ---|---|--- 2025-07-22 13:48:45+00:00| seen| https://poliverso.org/objects/0477a01e-605c14d2-887a4e63c671f474 2025-07-23 03:45:08+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lum46iuol22j 2025-07-24 03:36:27+00:00| seen|...