CVE-2024-12728

Critical

A weak credentials vulnerability potentially allows privileged system access via SSH to Sophos Firewall older than version 20.0 MR3…

Sophos·CWE-1391·Published 2024-12-19

CVSS

9.8

EPSS

0.01

KEV

Exploits

cve.orgen

141 chars

A weak credentials vulnerability potentially allows privileged system access via SSH to Sophos Firewall older than version 20.0 MR3 (20.0.3).

NVDen

141 chars

A weak credentials vulnerability potentially allows privileged system access via SSH to Sophos Firewall older than version 20.0 MR3 (20.0.3).

NVDes

174 chars

Una vulnerabilidad de credenciales débiles permite potencialmente el acceso privilegiado al sistema a través de SSH a Sophos Firewall anterior a la versión 20.0 MR3 (20.0.3).

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	9.8	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
3.1	Secondary	NVD	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H