Sophos Firewall Multiple Vulnerabilities

Release Date: 22 Jul 2025

RISK: Medium Risk

TYPE: Security software and application - Security Software & Appliance

Multiple vulnerabilities were identified in Sophos Firewall. A remote attacker could exploit some of these vulnerabilities to trigger remote code execution on the targeted system.

---

Impact

• Remote Code Execution

---

System / Technologies affected

• Sophos Firewall version prior to v21.5 GA (21.5.0)

---

Solutions

Before installation of the software, please visit the vendor web-site for more details.

 

Apply fixes issued by the vendor:

• https://www.sophos.com/en-us/security-advisories/sophos-sa-20250721-sfos-rce

---

Vulnerability Identifier

• CVE-2024-13973
• CVE-2024-13974
• CVE-2025-6704
• CVE-2025-7382
• CVE-2025-7624

---

Source

• Sophos

---

Related Link

• https://www.sophos.com/en-us/security-advisories/sophos-sa-20250721-sfos-rce