Security Advisories

Advisory

Impact

CVE

Product Family

Sort by

Items per page

RSS Feed

Informational

Advisory: curl high severity vulnerability

CVE(s):

CVE-2023-38545

Updated: 2023 10月 23

Product(s):

Cloud Optix

Sophos Endpoint

SafeGuard Enterprise (SGN)

Sophos Central

Sophos Connect Client 2.0

Sophos Email

Sophos Firewall

Sophos Home

Sophos Mobile

Sophos Mobile EAS Proxy

Sophos RED

Sophos Switch

Sophos UTM

Sophos Wireless

Sophos ZTNA

SophosLabs Intelix

文章版本 1

发布 ID sophos-sa-20231023-curl-vuln

First Published 周一, 10/23/2023 - 17:08

解决方法 No
High

Resolved SPX password disclosure in Sophos Firewall (CVE-2023-5552)

CVE(s):

CVE-2023-5552

Updated: 2023 10月 17

Product(s):

Sophos Firewall

文章版本 1

发布 ID sophos-sa-20231017-spx-password

First Published 周二, 10/17/2023 - 23:13

解决方法 Yes
High

Multiple Vulnerabilities in Exim

CVE(s):

CVE-2023-42114

CVE-2023-42115

CVE-2023-42116

CVE-2023-42117

CVE-2023-42118

CVE-2023-42119

Updated: 2023 10月 5

Product(s):

Sophos Firewall

Sophos UTM

文章版本 1

发布 ID sophos-sa-20231005-exim-vuln

First Published 周四, 10/05/2023 - 02:43

解决方法 Yes
Medium

Sophos Connect v2.2 MR1 Resolves Security Vulnerabilities

CVE(s):

CVE-2022-48309

CVE-2022-48310

CVE-2022-4901

Updated: 2023 3月 1

Product(s):

Sophos Connect Client 2.0

文章版本 1

发布 ID sophos-sa-20230301-scc-csrf

First Published 周三, 03/01/2023 - 17:41

解决方法 No
Informational

Advisory: OpenSSL high severity vulnerability

CVE(s):

CVE-2023-0286

Updated: 2023 2月 20

Product(s):

Cloud Optix

Sophos Endpoint

Sophos Central

Sophos Connect Client 2.0

Sophos Email

Sophos Email Appliance (SEA)

Sophos Enterprise Console (SEC)

Sophos Firewall

Sophos Home

Sophos Mobile

Sophos Mobile EAS Proxy

Sophos RED

Sophos UTM

Sophos Web Appliance (SWA)

Sophos Wireless

SophosLabs Intelix

文章版本 2

发布 ID sophos-sa-20230214-openssl-vuln

First Published 周二, 02/14/2023 - 13:32

解决方法 No
Critical

Sophos Firewall v19.5 GA Resolves Security Vulnerabilities

CVE(s):

CVE-2022-3236

CVE-2022-3226

CVE-2022-3713

CVE-2022-3696

CVE-2022-3709

CVE-2022-3711

CVE-2022-3710

Updated: 2022 12月 6

Product(s):

Sophos Firewall

文章版本 3

发布 ID sophos-sa-20221201-sfos-19-5-0

First Published 周四, 12/01/2022 - 17:00

解决方法 No
Critical

Resolved XEE vulnerability in Sophos Mobile managed on-premises (CVE-2022-3980)

CVE(s):

CVE-2022-3980

Updated: 2022 11月 16

Product(s):

Sophos Mobile

文章版本 1

发布 ID sophos-sa-20221116-smc-xee

First Published 周三, 11/16/2022 - 11:15

解决方法 Yes
Informational

Advisory: OpenSSL 3.x critical vulnerability

CVE(s):

CVE-2022-3786

CVE-2022-3602

Updated: 2022 11月 4

Product(s):

Cloud Optix

Sophos Endpoint

Reflexion

SafeGuard Enterprise (SGN)

Sophos Authenticator

Sophos Central

Sophos Connect Client 2.0

Sophos Email

Sophos Email Appliance (SEA)

Sophos Enterprise Console (SEC)

Sophos Firewall

Sophos Home

Sophos Mobile

Sophos Mobile EAS Proxy

Sophos RED

Sophos Transparent Authentication Suite (STAS)

Sophos UTM

Sophos UTM Manager

Sophos Web Appliance (SWA)

Sophos Wireless

Sophos ZTNA

SophosLabs Intelix

文章版本 3

发布 ID sophos-sa-20221031-openssl-vuln

First Published 周一, 10/31/2022 - 00:21

解决方法 No
High

Sophos Firewall v19.0 MR1 Resolves Security Vulnerabilities

CVE(s):

CVE-2022-1292

CVE-2022-1807

Updated: 2022 9月 7

Product(s):

Sophos Firewall

文章版本 1

发布 ID sophos-sa-20220907-sfos-19-0-1

First Published 周三, 09/07/2022 - 18:40

解决方法 No
Critical

Sophos Firewall v18.5 MR4 Resolves Security Vulnerabilities

CVE(s):

CVE-2022-1040

CVE-2021-25268

CVE-2022-1292

CVE-2022-1807

CVE-2021-25267

Updated: 2022 9月 7

Product(s):

Sophos Firewall

文章版本 1

发布 ID sophos-sa-20220907-sfos-18-5-4

First Published 周三, 09/07/2022 - 15:03

解决方法 No
Critical

Sophos Firewall v19.0 GA Resolves Security Vulnerabilities (CVE-2022-1040, CVE-2021-25268, CVE-2021-25267, CVE-2022-0331)

CVE(s):

CVE-2022-1040

CVE-2021-25268

CVE-2021-25267

CVE-2022-0331

Updated: 2022 5月 5

Product(s):

Sophos Firewall

文章版本 1

发布 ID sophos-sa-20220505-sfos-19-0-0

First Published 周四, 05/05/2022 - 17:52

解决方法 No
Low

Intercept X for Mobile (Android) Resolves Insecure Data Storage Vulnerability (CVE-2021-25266)

CVE(s):

CVE-2021-25266

Updated: 2022 4月 27

Product(s):

Sophos Authenticator

Sophos Mobile

文章版本 1

发布 ID sophos-sa-20220427-ixm-storage

First Published 周三, 04/27/2022 - 17:08

解决方法 No
Critical

Resolved RCE in Sophos Firewall (CVE-2022-1040)

CVE(s):

CVE-2022-1040

Updated: 2022 4月 5

Product(s):

Sophos Firewall

文章版本 3

发布 ID sophos-sa-20220325-sfos-rce

First Published 周五, 03/25/2022 - 12:00

解决方法 Yes
Informational

Advisory: Spring Cloud Function (SPEL) and Spring Framework AKA SpringShell vulnerabilities (CVE-2022-22963, CVE-2022-22965)

CVE(s):

CVE-2022-22963

CVE-2022-22965

Updated: 2022 4月 1

Product(s):

Cloud Optix

Reflexion

Sophos Central

Sophos Email

Sophos Firewall

Sophos Home

Sophos Mobile

Sophos Mobile EAS Proxy

Sophos Switch

Sophos UTM

Sophos UTM Manager

文章版本 1

发布 ID sophos-sa-20220401-spring-rce

First Published 周五, 04/01/2022 - 15:48

解决方法 No
Medium

Sophos Firewall v18.5 MR3 Resolves Security Vulnerabilities (CVE-2022-0331)

CVE(s):

CVE-2022-0331

Updated: 2022 3月 28

Product(s):

Sophos Firewall

文章版本 1

发布 ID sophos-sa-20220328-sfos-18-5-3

First Published 周一, 03/28/2022 - 01:08

解决方法 No
High

Sophos (SG) UTM 9.710 MR10 Resolves Security Vulnerabilities (CVE-2022-0386, CVE-2022-0652)

CVE(s):

CVE-2022-0386

CVE-2022-0652

Updated: 2022 3月 21

Product(s):

Sophos UTM

文章版本 1

发布 ID sophos-sa-20220321-utm-9710

First Published 周一, 03/21/2022 - 23:02

解决方法 No
High

Advisory: OpenSSL DoS vulnerability (CVE-2022-0778)

CVE(s):

CVE-2022-0778

Updated: 2022 3月 18

Product(s):

Sophos Firewall

Sophos UTM

Sophos Web Appliance (SWA)

文章版本 1

发布 ID sophos-sa-20220318-openssl-dos

First Published 周五, 03/18/2022 - 22:00

解决方法 No
Medium

SSL VPN Client Local DoS (CVE-2021-36809)

CVE(s):

CVE-2021-36809

Updated: 2022 3月 3

Product(s):

Sophos SSL VPN client

文章版本 1

发布 ID sophos-sa-20220303-sslvpn-local-dos

First Published 周四, 03/03/2022 - 09:30

解决方法 No
Informational

Advisory: Central Logging

CVE(s):

Updated: 2022 2月 8

Product(s):

Sophos Central

文章版本 2

发布 ID 2022-02-CentralLogging

First Published 周二, 02/08/2022 - 22:17

解决方法 No
High

Resolved Post-auth SQLi in Capsule8 Console (CVE-2022-0366)

CVE(s):

CVE-2022-0366

Updated: 2022 2月 1

Product(s):

Capsule8 Console

文章版本 1

发布 ID sophos-sa-20220201-cap8-console-sqli

First Published 周二, 02/01/2022 - 21:08

解决方法 No