VULNERABILITY INTELLIGENCE

CVE-2024-13974

CVSS score8.1 HIGH

EPSS probability9.07%

CISA KEVNot currently listed

Published2025-07-21

Last modified2026-06-17

Description

A business logic vulnerability in the Up2Date component of Sophos Firewall older than version 21.0 MR1 (20.0.1) can lead to attackers controlling the firewall’s DNS environment to achieve remote code execution.