Sophos — XG Firewall — Sophos XG Firewall contains a buffer overflow vulnerability that allows for remote code execution via the "HTTP/S bookmark" feature.
Details
EPSS Score
ⓘ
10.67%
95.4th percentile
Confidence
100%
CISA KEV
Date Added
Feb 6, 2025
Patch Due
Feb 27, 2025
Required Action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.