{ "document" : { "aggregate_severity" : { "text" : "hoch" }, "category" : "csaf_base", "csaf_version" : "2.0", "distribution" : { "tlp" : { "label" : "WHITE", "url" : "https://www.first.org/tlp/" } }, "lang" : "de-DE", "notes" : [ { "category" : "legal_disclaimer", "text" : "Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen." }, { "category" : "description", "text" : "Sophos Firewall ist die Firewall-Software für Sophos Appliances.", "title" : "Produktbeschreibung" }, { "category" : "summary", "text" : "Ein Angreifer kann mehrere Schwachstellen in Sophos Firewall ausnutzen, um beliebigen Programmcode auszuführen.", "title" : "Angriff" }, { "category" : "general", "text" : "- Sonstiges", "title" : "Betroffene Betriebssysteme" } ], "publisher" : { "category" : "other", "contact_details" : "csaf-provider@cert-bund.de", "name" : "Bundesamt für Sicherheit in der Informationstechnik", "namespace" : "https://www.bsi.bund.de" }, "references" : [ { "category" : "self", "summary" : "WID-SEC-W-2025-1615 - CSAF Version", "url" : "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1615.json" }, { "category" : "self", "summary" : "WID-SEC-2025-1615 - Portal Version", "url" : "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1615" }, { "category" : "external", "summary" : "Sophos Security Advisory vom 2025-07-21", "url" : "https://www.sophos.com/en-us/security-advisories/sophos-sa-20250721-sfos-rce" } ], "source_lang" : "en-US", "title" : "Sophos Firewall: Mehrere Schwachstellen ermöglichen Codeausführung", "tracking" : { "current_release_date" : "2025-07-21T22:00:00.000+00:00", "generator" : { "date" : "2025-07-22T09:46:56.473+00:00", "engine" : { "name" : "BSI-WID", "version" : "1.4.0" } }, "id" : "WID-SEC-W-2025-1615", "initial_release_date" : "2025-07-21T22:00:00.000+00:00", "revision_history" : [ { "date" : "2025-07-21T22:00:00.000+00:00", "number" : "1", "summary" : "Initiale Fassung" } ], "status" : "final", "version" : "1" } }, "product_tree" : { "branches" : [ { "branches" : [ { "branches" : [ { "category" : "product_version_range", "name" : "<19.0 MR2 (19.0.2.472)", "product" : { "name" : "Sophos Firewall <19.0 MR2 (19.0.2.472)", "product_id" : "T045563" } }, { "category" : "product_version", "name" : "19.0 MR2 (19.0.2.472)", "product" : { "name" : "Sophos Firewall 19.0 MR2 (19.0.2.472)", "product_id" : "T045563-fixed", "product_identification_helper" : { "cpe" : "cpe:/a:sophos:firewall:19.0_mr2_%252819.0.2.472%2529" } } }, { "category" : "product_version_range", "name" : "<20.0 MR2 (20.0.2.378)", "product" : { "name" : "Sophos Firewall <20.0 MR2 (20.0.2.378)", "product_id" : "T045564" } }, { "category" : "product_version", "name" : "20.0 MR2 (20.0.2.378)", "product" : { "name" : "Sophos Firewall 20.0 MR2 (20.0.2.378)", "product_id" : "T045564-fixed", "product_identification_helper" : { "cpe" : "cpe:/a:sophos:firewall:20.0_mr2_%252820.0.2.378%2529" } } }, { "category" : "product_version_range", "name" : "<20.0 MR3 (20.0.3.427)", "product" : { "name" : "Sophos Firewall <20.0 MR3 (20.0.3.427)", "product_id" : "T045565" } }, { "category" : "product_version", "name" : "20.0 MR3 (20.0.3.427)", "product" : { "name" : "Sophos Firewall 20.0 MR3 (20.0.3.427)", "product_id" : "T045565-fixed", "product_identification_helper" : { "cpe" : "cpe:/a:sophos:firewall:20.0_mr3_%252820.0.3.427%2529" } } }, { "category" : "product_version_range", "name" : "<21.0 GA (21.0.0.169)", "product" : { "name" : "Sophos Firewall <21.0 GA (21.0.0.169)", "product_id" : "T045566" } }, { "category" : "product_version", "name" : "21.0 GA (21.0.0.169)", "product" : { "name" : "Sophos Firewall 21.0 GA (21.0.0.169)", "product_id" : "T045566-fixed", "product_identification_helper" : { "cpe" : "cpe:/a:sophos:firewall:21.0_ga_%252821.0.0.169%2529" } } }, { "category" : "product_version_range", "name" : "<21.0 MR1-2 (21.0.1.277)", "product" : { "name" : "Sophos Firewall <21.0 MR1-2 (21.0.1.277)", "product_id" : "T045567" } }, { "category" : "product_version", "name" : "21.0 MR1-2 (21.0.1.277)", "product" : { "name" : "Sophos Firewall 21.0 MR1-2 (21.0.1.277)", "product_id" : "T045567-fixed", "product_identification_helper" : { "cpe" : "cpe:/a:sophos:firewall:21.0_mr1-2_%252821.0.1.277%2529" } } }, { "category" : "product_version_range", "name" : "<21.5 GA (21.5.0.171)", "product" : { "name" : "Sophos Firewall <21.5 GA (21.5.0.171)", "product_id" : "T045568" } }, { "category" : "product_version", "name" : "21.5 GA (21.5.0.171)", "product" : { "name" : "Sophos Firewall 21.5 GA (21.5.0.171)", "product_id" : "T045568-fixed", "product_identification_helper" : { "cpe" : "cpe:/a:sophos:firewall:21.5_ga_%252821.5.0.171%2529" } } }, { "category" : "product_version_range", "name" : "<21.0 MR1-1 (21.0.1.272)", "product" : { "name" : "Sophos Firewall <21.0 MR1-1 (21.0.1.272)", "product_id" : "T045570" } }, { "category" : "product_version", "name" : "21.0 MR1-1 (21.0.1.272)", "product" : { "name" : "Sophos Firewall 21.0 MR1-1 (21.0.1.272)", "product_id" : "T045570-fixed", "product_identification_helper" : { "cpe" : "cpe:/a:sophos:firewall:21.0_mr1-1_%252821.0.1.272%2529" } } }, { "category" : "product_version_range", "name" : "<21.0 MR1 (21.0.1.237)", "product" : { "name" : "Sophos Firewall <21.0 MR1 (21.0.1.237)", "product_id" : "T045572" } }, { "category" : "product_version", "name" : "21.0 MR1 (21.0.1.237)", "product" : { "name" : "Sophos Firewall 21.0 MR1 (21.0.1.237)", "product_id" : "T045572-fixed", "product_identification_helper" : { "cpe" : "cpe:/a:sophos:firewall:21.0_mr1_%252821.0.1.237%2529" } } }, { "category" : "product_version_range", "name" : "