Security Advisories

Advisory

Impact

CVE

Product Family

Sort by

Items per page

Critical

Sophos Firewall v19.0 GA Resolves Security Vulnerabilities (CVE-2022-1040, CVE-2021-25268, CVE-2021-25267, CVE-2022-0331)

CVE(s):

CVE-2022-1040

CVE-2021-25268

CVE-2021-25267

CVE-2022-0331

Updated: 2022 May 5

Product(s):

Sophos Firewall

Article Version: 1

Publication ID: sophos-sa-20220505-sfos-19-0-0

First Published: Thu, 05/05/2022 - 17:52

Workaround: No
Low

Intercept X for Mobile (Android) Resolves Insecure Data Storage Vulnerability (CVE-2021-25266)

CVE(s):

CVE-2021-25266

Updated: 2022 Apr 27

Product(s):

Sophos Authenticator

Sophos Mobile

Article Version: 1

Publication ID: sophos-sa-20220427-ixm-storage

First Published: Wed, 04/27/2022 - 17:08

Workaround: No
Critical

Resolved RCE in Sophos Firewall (CVE-2022-1040)

CVE(s):

CVE-2022-1040

Updated: 2022 Apr 5

Product(s):

Sophos Firewall

Article Version: 3

Publication ID: sophos-sa-20220325-sfos-rce

First Published: Fri, 03/25/2022 - 12:00

Workaround: Yes
Informational

Advisory: Spring Cloud Function (SPEL) and Spring Framework AKA SpringShell vulnerabilities (CVE-2022-22963, CVE-2022-22965)

CVE(s):

CVE-2022-22963

CVE-2022-22965

Updated: 2022 Apr 1

Product(s):

Cloud Optix

Reflexion

Sophos Central

Sophos Email

Sophos Firewall

Sophos Home

Sophos Mobile

Sophos Mobile EAS Proxy

Article Version: 1

Publication ID: sophos-sa-20220401-spring-rce

First Published: Fri, 04/01/2022 - 15:48

Workaround: No
Medium

Sophos Firewall v18.5 MR3 Resolves Security Vulnerabilities (CVE-2022-0331)

CVE(s):

CVE-2022-0331

Updated: 2022 Mar 28

Product(s):

Sophos Firewall

Article Version: 1

Publication ID: sophos-sa-20220328-sfos-18-5-3

First Published: Mon, 03/28/2022 - 01:08

Workaround: No
High

Sophos (SG) UTM 9.710 MR10 Resolves Security Vulnerabilities (CVE-2022-0386, CVE-2022-0652)

CVE(s):

CVE-2022-0386

CVE-2022-0652

Updated: 2022 Mar 21

Product(s):

Sophos UTM

Article Version: 1

Publication ID: sophos-sa-20220321-utm-9710

First Published: Mon, 03/21/2022 - 23:02

Workaround: No
High

Advisory: OpenSSL DoS vulnerability (CVE-2022-0778)

CVE(s):

CVE-2022-0778

Updated: 2022 Mar 18

Product(s):

Sophos Firewall

Sophos UTM

Sophos Web Appliance (SWA)

Article Version: 1

Publication ID: sophos-sa-20220318-openssl-dos

First Published: Fri, 03/18/2022 - 22:00

Workaround: No
Medium

SSL VPN Client Local DoS (CVE-2021-36809)

CVE(s):

CVE-2021-36809

Updated: 2022 Mar 3

Product(s):

Sophos SSL VPN client

Article Version: 1

Publication ID: sophos-sa-20220303-sslvpn-local-dos

First Published: Thu, 03/03/2022 - 09:30

Workaround: No
Informational

Advisory: Central Logging

CVE(s):

Updated: 2022 Feb 8

Product(s):

Sophos Central

Article Version: 2

Publication ID: 2022-02-CentralLogging

First Published: Tue, 02/08/2022 - 22:17

Workaround: No
High

Resolved Post-auth SQLi in Capsule8 Console (CVE-2022-0366)

CVE(s):

CVE-2022-0366

Updated: 2022 Feb 1

Product(s):

Capsule8 Console

Article Version: 1

Publication ID: sophos-sa-20220201-cap8-console-sqli

First Published: Tue, 02/01/2022 - 21:08

Workaround: No
Critical

Advisory: Log4j zero-day vulnerability AKA Log4Shell (CVE-2021-44228, CVE-2021-45046, CVE-2021-45105, CVE-2021-44832)

CVE(s):

CVE-2021-44228

CVE-2021-45046

CVE-2021-45105

CVE-2021-44832

Updated: 2022 Jan 13

Product(s):

Client Authentication Agent

Cloud Optix

Intercept X Endpoint

Intercept X for Server

Reflexion

SafeGuard Enterprise (SGN)

Sophos UTM

Sophos UTM Manager

Sophos Authenticator

Sophos Central

Sophos Connect Client 2.0

Sophos Email

Sophos Email Appliance (SEA)

Sophos Enterprise Console (SEC)

Sophos Firewall

Sophos Home

Sophos Mobile

Sophos Mobile EAS Proxy

Sophos RED

Sophos SSL VPN client

Sophos Transparent Authentication Suite (STAS)

Sophos Web Appliance (SWA)

Sophos Wireless

Sophos ZTNA

SophosLabs Intelix

Article Version: 27

Publication ID: sophos-sa-20211210-log4j-rce

First Published: Fri, 12/10/2021 - 13:45

Workaround: No
Medium

Resolved HMPA Service Local DoS (CVE-2021-25269)

CVE(s):

CVE-2021-25269

Updated: 2021 Nov 26

Product(s):

Sophos Exploit Prevention

Intercept X for Server

Intercept X Endpoint

Article Version: 1

Publication ID: sophos-sa-20211126-ixa-hmpa-local-dos

First Published: Fri, 11/26/2021 - 08:00

Workaround: No
High

Resolved Post-auth SQLi in SG UTM User Portal (CVE-2021-36807)

CVE(s):

CVE-2021-36807

Updated: 2021 Nov 26

Product(s):

Sophos UTM

Article Version: 1

Publication ID: sophos-sa-20211126-sg-sqli

First Published: Fri, 11/26/2021 - 10:07

Workaround: No
Medium

Resolved App Password Bypass on Sophos Secure Workspace for Android (CVE-2021-36808)

CVE(s):

CVE-2021-36808

Updated: 2021 Oct 29

Product(s):

Sophos Secure Workspace (Android)

Article Version: 1

Publication ID: sophos-sa-20211029-ssw-pw-bypass

First Published: Fri, 10/29/2021 - 17:41

Workaround: No
High

Resolved LPE in HitmanPro.Alert (CVE-2021-25270)

CVE(s):

CVE-2021-25270

Updated: 2021 Oct 7

Product(s):

HitmanPro.Alert

Article Version: 2

Publication ID: sophos-sa-20211007-hmpa-lpe

First Published: Thu, 10/07/2021 - 10:23

Workaround: No
High

Resolved LPE in HitmanPro (CVE-2021-25271)

CVE(s):

CVE-2021-25271

Updated: 2021 Oct 7

Product(s):

HitmanPro

Article Version: 2

Publication ID: sophos-sa-20211007-hmp-lpe

First Published: Thu, 10/07/2021 - 09:56

Workaround: No
Critical

Resolved RCE in SG UTM WebAdmin (CVE-2020-25223)

CVE(s):

CVE-2020-25223

Updated: 2021 Sep 23

Product(s):

Sophos UTM

Article Version: 2

Publication ID: sophos-sa-20200918-sg-webadmin-rce

First Published: Fri, 09/18/2020 - 21:11

Workaround: Yes
Medium

Multiple Vulnerabilities (AKA FragAttacks) in WiFi Specification

CVE(s):

CVE-2020-24586

CVE-2020-24587

CVE-2020-24588

Updated: 2021 May 12

Product(s):

Sophos Firewall

Sophos UTM

Sophos Wireless

Article Version: 1

Publication ID: sophos-sa-20210512-fragattacks

First Published: Wed, 05/12/2021 - 18:13

Workaround: No
High

Resolved LPE in Endpoint for MacOS (CVE-2021-25264)

CVE(s):

CVE-2021-25264

Updated: 2021 May 7

Product(s):

Intercept X Endpoint

Article Version: 1

Publication ID: sophos-sa-20210507-ix-macos-lpe

First Published: Fri, 05/07/2021 - 18:11

Workaround: No
Critical

Multiple Vulnerabilities (AKA 21Nails) in Exim

CVE(s):

Updated: 2021 May 4

Product(s):

Sophos Firewall

Sophos UTM

Article Version: 1

Publication ID: sophos-sa-20210504-exim-21nails

First Published: Tue, 05/04/2021 - 17:33

Workaround: Yes