← All credits
The UK's National Cyber Security Centre (NCSC)
3 vulnerability records and advisories credit this contributor.
CVE-2024-13974
A business logic vulnerability in the Up2Date component of Sophos Firewall older than version 21.0 MR1 (20.0.1) can lead to attackers controlling the firewall’s DNS environment to achieve remote code execution.
CVE-2024-13973
A post-auth SQL injection vulnerability in WebAdmin of Sophos Firewall versions older than 21.0 MR1 (21.0.1) can potentially lead to administrators achieving arbitrary code execution.
CVE-2019-1581
PAN-OS: Remote code execution vulnerability in the PAN-OS SSH device management interface