How many sophos xg firewall firmware CVEs are in CISA KEV?

Yes — 1 of sophos xg firewall firmware's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Are there public exploits for sophos xg firewall firmware vulnerabilities?

Yes — 1 of sophos xg firewall firmware's CVEs have a known public exploit.

Which versions of sophos xg firewall firmware are affected?

8 distinct sophos xg firewall firmware versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in sophos xg firewall firmware CVEs?

sophos xg firewall firmware's CVEs most often map to these CWE weakness types: CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-94 (Improper Control of Generation of Code ('Code Injection')), CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')).

How many critical sophos xg firewall firmware vulnerabilities are there?

sophos xg firewall firmware has 2 critical and 5 high-severity CVEs.

What is the average severity of sophos xg firewall firmware CVEs?

The average CVSS base score across sophos xg firewall firmware's scored CVEs is 7.4.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

sophos

9 CVEs

1 in CISA KEV

sophos xg firewall firmware Vulnerabilities

Name: sophos xg firewall firmware vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for xg firewall firmware by sophos.

9

Total CVEs

Published

1

In CISA KEV

Exploited in the wild

1

Public exploits

PoC or exploit code

7.4

Avg CVSS

2020–2022

Last updated December 1, 2022

Overview

sophos xg firewall firmware has 9 published CVE records since 2020, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 7.4.

This page aggregates every publicly disclosed vulnerability (CVE) affecting sophos xg firewall firmware, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include xg firewall.

Severity and exploitation

How the CVSS severity of sophos xg firewall firmware's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical2

High5

Medium1

Low1

In CISA’s Known Exploited Vulnerabilities catalog

1

One of sophos xg firewall firmware's CVEs is confirmed exploited in the wild.

Public exploits

1

One of sophos xg firewall firmware's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every sophos xg firewall firmware version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

<= 19.05 CVEs
17.5 <= v <= 17.53 CVEs
18.0 <= v <= 18.02 CVEs
< 19.51 CVE
17.0 <= v < 17.51 CVE
17.0 <= v <= 17.51 CVE

Fixed in

17.51 CVE
19.51 CVE

Find a version

9 CVEs

Sort

High vulnerability · 2022-12-01
CVE-2022-3713
Patch
CWE-94
High · CVSS 8.8
EPSS 0.7% (49th pct)2022-12-01
Medium vulnerability · 2022-12-01
CVE-2022-3711
Patch
CWE-89
Medium · CVSS 4.3
EPSS 0.7% (49th pct)2022-12-01
Low vulnerability · 2022-12-01
CVE-2022-3710
Patch
CWE-89
Low · CVSS 2.7
EPSS 0.7% (49th pct)2022-12-01
High vulnerability · 2022-12-01
CVE-2022-3709
Patch
CWE-79
High · CVSS 8.4
EPSS 0.8% (53th pct)2022-12-01
High vulnerability · 2022-12-01
CVE-2022-3696
Patch
CWE-94
High · CVSS 7.2
EPSS 1.1% (62th pct)2022-12-01
High vulnerability · 2022-12-01
CVE-2022-3226
Patch
CWE-78
High · CVSS 7.2
EPSS 1.7% (75th pct)2022-12-01
High vulnerability · 2020-08-07
CVE-2020-17352
High · CVSS 8.8
EPSS 4.1% (90th pct)2020-08-07
Critical vulnerability · 2020-07-10
CVE-2020-15504
Critical · CVSS 9.8
EPSS 2.2% (80th pct)2020-07-10
Critical vulnerability · 2020-06-29
CVE-2020-15069
CISA KEV
Public exploit
Patch
CWE-120
Added to CISA KEV 2025-02-06
Critical · CVSS 9.3
EPSS 10.7% (95th pct)2020-06-29

Common weakness types

The CWE weakness categories most often found in sophos xg firewall firmware CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many sophos xg firewall firmware CVEs were published each year.

2020

3

2022

6

Other sophos products

Browse vulnerabilities for other products by sophos.

sophos anti-virus36 CVEs Sophos Firewall21 CVEs web appliance18 CVEs firewall13 CVEs xg firewall13 CVEs anti-virus12 CVEs firewall firmware10 CVEs sophos puremessage anti-virus9 CVEs

All sophos vulnerabilities

Frequently asked questions

Common questions about sophos xg firewall firmware vulnerabilities.

How many CVEs does sophos xg firewall firmware have?: sophos xg firewall firmware has 9 published CVE records since 2020.
How many sophos xg firewall firmware CVEs are in CISA KEV?: Yes — 1 of sophos xg firewall firmware's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for sophos xg firewall firmware vulnerabilities?: Yes — 1 of sophos xg firewall firmware's CVEs have a known public exploit.
Which versions of sophos xg firewall firmware are affected?: 8 distinct sophos xg firewall firmware versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in sophos xg firewall firmware CVEs?: sophos xg firewall firmware's CVEs most often map to these CWE weakness types: CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-94 (Improper Control of Generation of Code ('Code Injection')), CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')).
How many critical sophos xg firewall firmware vulnerabilities are there?: sophos xg firewall firmware has 2 critical and 5 high-severity CVEs.
What is the average severity of sophos xg firewall firmware CVEs?: The average CVSS base score across sophos xg firewall firmware's scored CVEs is 7.4.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track sophos xg firewall firmware vulnerabilities

Monitor new sophos xg firewall firmware vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing