How many sophos firewall firmware CVEs are in CISA KEV?

None of sophos firewall firmware's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of sophos firewall firmware are affected?

8 distinct sophos firewall firmware versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in sophos firewall firmware CVEs?

sophos firewall firmware's CVEs most often map to these CWE weakness types: CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-1391 (Use of Weak Credentials).

How many critical sophos firewall firmware vulnerabilities are there?

sophos firewall firmware has 4 critical and 6 high-severity CVEs.

What is the average severity of sophos firewall firmware CVEs?

The average CVSS base score across sophos firewall firmware's scored CVEs is 8.9.

RadicalNotion.AI

Log in Create an account

sophos

10 CVEs

sophos firewall firmware Vulnerabilities

Name: sophos firewall firmware vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for firewall firmware by sophos.

10

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

8.9

Avg CVSS

2022–2025

Last updated July 21, 2025

Overview

sophos firewall firmware has 10 published CVE records since 2022, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 8.9. Affected platforms include firewall.

Severity and exploitation

How the CVSS severity of sophos firewall firmware's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical4

High6

Medium0

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of sophos firewall firmware's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No sophos firewall firmware CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every sophos firewall firmware version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 21.0.14 CVEs
< 21.0.23 CVEs
< 19.02 CVEs
< 20.0.31 CVE

Fixed in

21.0.14 CVEs
21.0.23 CVEs
19.02 CVEs
20.0.31 CVE

Find a version

10 CVEs

Sort

High vulnerability · 2025-07-21
CVE-2024-13973
Patch
CWE-89
High · CVSS 7.2
EPSS 10.5% (96th pct)2025-07-21
High vulnerability · 2025-07-21
CVE-2024-13974
Patch
CWE-807
High · CVSS 8.1
EPSS 7.7% (95th pct)2025-07-21
High vulnerability · 2025-07-21
CVE-2025-7382
Patch
CWE-78
High · CVSS 8.8
EPSS 4.2% (91th pct)2025-07-21
Critical vulnerability · 2025-07-21
CVE-2025-7624
Patch
CWE-89
Critical · CVSS 9.8
EPSS 8.9% (95th pct)2025-07-21
Critical vulnerability · 2025-07-21
CVE-2025-6704
Patch
CWE-78
Critical · CVSS 9.8
EPSS 10.0% (96th pct)2025-07-21
High vulnerability · 2024-12-19
CVE-2024-12729
Patch
CWE-94
High · CVSS 8.8
EPSS 1.3% (70th pct)2024-12-19
Critical vulnerability · 2024-12-19
CVE-2024-12728
Patch
CWE-1391
Critical · CVSS 9.8
EPSS 0.9% (60th pct)2024-12-19
Critical vulnerability · 2024-12-19
CVE-2024-12727
Patch
CWE-89
Critical · CVSS 9.8
EPSS 1.4% (72th pct)2024-12-19
High vulnerability · 2022-05-05
CVE-2021-25268
Patch
CWE-79
High · CVSS 8.4
EPSS 0.9% (59th pct)2022-05-05
High vulnerability · 2022-05-05
CVE-2021-25267
Patch
CWE-79
High · CVSS 8.4
EPSS 1.1% (65th pct)2022-05-05

Common weakness types

The CWE weakness categories most often found in sophos firewall firmware CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many sophos firewall firmware CVEs were published each year.

2022

2

2024

3

2025

5

Other sophos products

Browse vulnerabilities for other products by sophos.

sophos anti-virus36 CVEs Sophos Firewall21 CVEs web appliance19 CVEs firewall13 CVEs xg firewall13 CVEs anti-virus12 CVEs sophos puremessage anti-virus9 CVEs unified threat management software9 CVEs

All sophos vulnerabilities

Frequently asked questions

Common questions about sophos firewall firmware vulnerabilities.

How many CVEs does sophos firewall firmware have?: sophos firewall firmware has 10 published CVE records since 2022.
How many sophos firewall firmware CVEs are in CISA KEV?: None of sophos firewall firmware's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for sophos firewall firmware vulnerabilities?: No sophos firewall firmware CVEs currently have a tracked public exploit in this dataset.
Which versions of sophos firewall firmware are affected?: 8 distinct sophos firewall firmware versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in sophos firewall firmware CVEs?: sophos firewall firmware's CVEs most often map to these CWE weakness types: CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-1391 (Use of Weak Credentials).
How many critical sophos firewall firmware vulnerabilities are there?: sophos firewall firmware has 4 critical and 6 high-severity CVEs.
What is the average severity of sophos firewall firmware CVEs?: The average CVSS base score across sophos firewall firmware's scored CVEs is 8.9.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track sophos firewall firmware vulnerabilities

Get an alert for each new sophos firewall firmware CVE, with AI-written analysis and remediation steps.

Create an account See pricing