Security Advisories

Advisory

Impact

CVE

Product Family

Sort by

Items per page

RSS Feed

Informational

Advisory: Unauthenticated Remote Code Execution Vulnerability in OpenSSH (CVE-2024-6387)

CVE(s):

CVE-2024-6387

Updated: 2024 Jul 4

Product(s):

Cloud Optix

Intercept X Endpoint

Sophos Central

Sophos Email

Sophos Firewall

Sophos Home

Sophos Mobile

Sophos Mobile EAS Proxy

Sophos RED

Sophos Secure Workspace (Android)

Sophos Switch

Sophos UTM

Sophos Wireless

SophosLabs Intelix

Article Version: 3

Publication ID: sophos-sa-20240704-regresshion

First Published: Thu, 07/04/2024 - 10:10

Workaround: No
Informational

Advisory: TunnelVision Vulnerability in VPN Clients

CVE(s):

CVE-2024-3661

Updated: 2024 Jun 10

Product(s):

Sophos Connect Client 2.0

Article Version: 1

Publication ID: sophos-sa-20240610-tunnelvision

First Published: Mon, 06/10/2024 - 11:32

Workaround: Yes
Informational

Advisory: Sisense Data Breach

CVE(s):

Updated: 2024 Apr 15

Product(s):

Sophos Central

Article Version: 1

Publication ID: sophos-sa-20240415-sisense-data-breach

First Published: Mon, 04/15/2024 - 17:49

Workaround: No
Informational

Advisory: Upstream Backdoor in XZ library

CVE(s):

CVE-2024-3094

Updated: 2024 Apr 1

Product(s):

Cloud Optix

Intercept X Endpoint

Intercept X for Server

Sophos Central

Sophos Email

Sophos Firewall

Sophos Home

Sophos Mobile

Sophos RED

Sophos Switch

Sophos UTM

Sophos Wireless

Sophos ZTNA

SophosLabs Intelix

Article Version: 1

Publication ID: sophos-sa-20240401-XZ Backdoor

First Published: Mon, 04/01/2024 - 20:13

Workaround: No
Informational

Advisory: Leaky Vessels vulnerabilities in Docker and runc

CVE(s):

CVE-2024-21626

CVE-2024-23651

CVE-2024-23652

CVE-2024-23653

Updated: 2024 Feb 8

Product(s):

Cloud Optix

Intercept X Endpoint

Sophos Central

Sophos Email

Sophos Firewall

Sophos Home

Sophos Mobile

Sophos Mobile EAS Proxy

Sophos RED

Sophos Switch

Sophos UTM

Sophos Wireless

Sophos ZTNA

SophosLabs Intelix

Article Version: 3

Publication ID: sophos-sa-20240206-leaky-vessels

First Published: Tue, 02/06/2024 - 22:49

Workaround: No
Critical

Resolved RCE in Sophos Firewall (CVE-2022-3236)

CVE(s):

CVE-2022-3236

Updated: 2023 Dec 11

Product(s):

Sophos Firewall

Article Version: 3

Publication ID: sophos-sa-20220923-sfos-rce

First Published: Fri, 09/23/2022 - 13:45

Workaround: Yes
Informational

Advisory: TunnelCrack Vulnerabilities in VPN Clients

CVE(s):

CVE-2023-36672

CVE-2023-35838

CVE-2023-36673

CVE-2023-36671

Updated: 2023 Nov 24

Product(s):

Sophos Connect Client 2.0

Article Version: 1

Publication ID: sophos-sa-20231124-tunnelcrack

First Published: Fri, 11/24/2023 - 14:00

Workaround: Yes
Critical

Sophos Web Appliance 4.3.10.4 Resolves Security Vulnerabilities

CVE(s):

CVE-2023-1671

CVE-2022-4934

CVE-2020-36692

Updated: 2023 Nov 17

Product(s):

Sophos Web Appliance (SWA)

Article Version: 2

Publication ID: sophos-sa-20230404-swa-rce

First Published: Tue, 04/04/2023 - 10:22

Workaround: No
Informational

Advisory: libwebp critical vulnerability

CVE(s):

CVE-2023-4863

Updated: 2023 Oct 31

Product(s):

Cloud Optix

Intercept X Endpoint

Intercept X for Server

Sophos Central

Sophos Connect Client 2.0

Sophos Email

Sophos Email Appliance (SEA)

Sophos Firewall

Sophos Home

Sophos Mobile

Sophos RED

Sophos Switch

Sophos UTM

Sophos Wireless

Sophos ZTNA

SophosLabs Intelix

Article Version: 2

Publication ID: sophos-sa-20231002-libwebp-vuln

First Published: Tue, 10/03/2023 - 23:01

Workaround: No
Informational

Advisory: curl high severity vulnerability

CVE(s):

CVE-2023-38545

Updated: 2023 Oct 23

Product(s):

Cloud Optix

Intercept X Endpoint

Intercept X for Server

SafeGuard Enterprise (SGN)

Sophos Central

Sophos Connect Client 2.0

Sophos Email

Sophos Firewall

Sophos Home

Sophos Mobile

Sophos Mobile EAS Proxy

Sophos RED

Sophos Switch

Sophos UTM

Sophos Wireless

Sophos ZTNA

SophosLabs Intelix

Article Version: 1

Publication ID: sophos-sa-20231023-curl-vuln

First Published: Mon, 10/23/2023 - 17:08

Workaround: No
High

Resolved SPX password disclosure in Sophos Firewall (CVE-2023-5552)

CVE(s):

CVE-2023-5552

Updated: 2023 Oct 17

Product(s):

Sophos Firewall

Article Version: 1

Publication ID: sophos-sa-20231017-spx-password

First Published: Tue, 10/17/2023 - 23:13

Workaround: Yes
High

Multiple Vulnerabilities in Exim

CVE(s):

CVE-2023-42114

CVE-2023-42115

CVE-2023-42116

CVE-2023-42117

CVE-2023-42118

CVE-2023-42119

Updated: 2023 Oct 5

Product(s):

Sophos Firewall

Sophos UTM

Article Version: 1

Publication ID: sophos-sa-20231005-exim-vuln

First Published: Thu, 10/05/2023 - 02:43

Workaround: Yes
Medium

Sophos Connect v2.2 MR1 Resolves Security Vulnerabilities

CVE(s):

CVE-2022-48309

CVE-2022-48310

CVE-2022-4901

Updated: 2023 Mar 1

Product(s):

Sophos Connect Client 2.0

Article Version: 1

Publication ID: sophos-sa-20230301-scc-csrf

First Published: Wed, 03/01/2023 - 17:41

Workaround: No
Informational

Advisory: OpenSSL high severity vulnerability

CVE(s):

CVE-2023-0286

Updated: 2023 Feb 20

Product(s):

Cloud Optix

Intercept X Endpoint

Intercept X for Server

Sophos Central

Sophos Connect Client 2.0

Sophos Email

Sophos Email Appliance (SEA)

Sophos Enterprise Console (SEC)

Sophos Firewall

Sophos Home

Sophos Mobile

Sophos Mobile EAS Proxy

Sophos RED

Sophos UTM

Sophos Web Appliance (SWA)

Sophos Wireless

SophosLabs Intelix

Article Version: 2

Publication ID: sophos-sa-20230214-openssl-vuln

First Published: Tue, 02/14/2023 - 13:32

Workaround: No
Critical

Sophos Firewall v19.5 GA Resolves Security Vulnerabilities

CVE(s):

CVE-2022-3236

CVE-2022-3226

CVE-2022-3713

CVE-2022-3696

CVE-2022-3709

CVE-2022-3711

CVE-2022-3710

Updated: 2022 Dec 6

Product(s):

Sophos Firewall

Article Version: 3

Publication ID: sophos-sa-20221201-sfos-19-5-0

First Published: Thu, 12/01/2022 - 17:00

Workaround: No
Critical

Resolved XEE vulnerability in Sophos Mobile managed on-premises (CVE-2022-3980)

CVE(s):

CVE-2022-3980

Updated: 2022 Nov 16

Product(s):

Sophos Mobile

Article Version: 1

Publication ID: sophos-sa-20221116-smc-xee

First Published: Wed, 11/16/2022 - 11:15

Workaround: Yes
Informational

Advisory: OpenSSL 3.x critical vulnerability

CVE(s):

CVE-2022-3786

CVE-2022-3602

Updated: 2022 Nov 4

Product(s):

Cloud Optix

Intercept X Endpoint

Intercept X for Server

Reflexion

SafeGuard Enterprise (SGN)

Sophos Authenticator

Sophos Central

Sophos Connect Client 2.0

Sophos Email

Sophos Email Appliance (SEA)

Sophos Enterprise Console (SEC)

Sophos Firewall

Sophos Home

Sophos Mobile

Sophos Mobile EAS Proxy

Sophos RED

Sophos Transparent Authentication Suite (STAS)

Sophos UTM

Sophos UTM Manager

Sophos Web Appliance (SWA)

Sophos Wireless

Sophos ZTNA

SophosLabs Intelix

Article Version: 3

Publication ID: sophos-sa-20221031-openssl-vuln

First Published: Mon, 10/31/2022 - 00:21

Workaround: No
High

Sophos Firewall v19.0 MR1 Resolves Security Vulnerabilities

CVE(s):

CVE-2022-1292

CVE-2022-1807

Updated: 2022 Sep 7

Product(s):

Sophos Firewall

Article Version: 1

Publication ID: sophos-sa-20220907-sfos-19-0-1

First Published: Wed, 09/07/2022 - 18:40

Workaround: No
Critical

Sophos Firewall v18.5 MR4 Resolves Security Vulnerabilities

CVE(s):

CVE-2022-1040

CVE-2021-25268

CVE-2022-1292

CVE-2022-1807

CVE-2021-25267

Updated: 2022 Sep 7

Product(s):

Sophos Firewall

Article Version: 1

Publication ID: sophos-sa-20220907-sfos-18-5-4

First Published: Wed, 09/07/2022 - 15:03

Workaround: No
Critical

Sophos Firewall v19.0 GA Resolves Security Vulnerabilities (CVE-2022-1040, CVE-2021-25268, CVE-2021-25267, CVE-2022-0331)

CVE(s):

CVE-2022-1040

CVE-2021-25268

CVE-2021-25267

CVE-2022-0331

Updated: 2022 May 5

Product(s):

Sophos Firewall

Article Version: 1

Publication ID: sophos-sa-20220505-sfos-19-0-0

First Published: Thu, 05/05/2022 - 17:52

Workaround: No