Sophos and SonicWall Patch Critical RCE Flaws Affecting Firewalls and SMA 100 Devices

🗓️ 24 Jul 2025 14:14:00Reported by The Hacker NewsType

thn🔗 thehackernews.com👁 5 Views

Sophos firewall and SMA patch critical remote code execution flaws CVE-2025-6704 and CVE-2025-7624.

Reporter	Title	Published	Views	Family All 69
BDU FSTEC	The vulnerability of SonicWall SMA 100 series network intrusion prevention systems’ microprogramming software lies in their ability to download files of a malicious nature without limitation, allowing attackers to execute arbitrary codes.	3 Sep 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the WebAdmin interface of Sophos Firewall (formerly Sophos XG Firewall) allows a hacker to execute arbitrary code.	12 Sep 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Up2Date component of Sophos Firewall’s network interfaces (previously called Sophos XG Firewall) allows a hacker to execute arbitrary code.	15 Oct 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the WebAdmin interface of Sophos Firewall (formerly Sophos XG Firewall) allows a hacker to execute arbitrary code.	15 Oct 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the SMTP proxy network interface component of Sophos Firewall (formerly Sophos XG Firewall) allows a hacker to execute arbitrary code.	17 Nov 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Secure PDF eXchange (SPX) function of the Sophos Firewall (formerly known as Sophos XG Firewall) allows a hacker to execute arbitrary code.	17 Nov 202500:00	–	bdu_fstec
Circl	CVE-2024-13973	22 Jul 202513:48	–	circl
Circl	CVE-2024-13974	22 Jul 202500:36	–	circl
Circl	CVE-2025-40599	23 Jul 202513:39	–	circl
Circl	CVE-2025-6704	22 Jul 202513:48	–	circl

24 Jul 2025 14:14Current

9.3High risk

Vulners AI Score9.3

CVSS 3.17.2 - 9.8

EPSS0.11635

SSVC

Sophos Firewall Secure Mobile Access remote code execution CVE-2025-6704 CVE-2025-7624 CVE-2025-7382 WebAdmin High Availability