« Volver al listado

CVE-2024-12728

Estado: AnalizadaCrítica (9.8)—

A weak credentials vulnerability potentially allows privileged system access via SSH to Sophos Firewall older than version 20.0 MR3 (20.0.3).

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

🎯 Técnicas ATT&CK

Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.

Acceso remoto SSH sin autenticación fuerte (credenciales débiles) en firewall expuesto en red permite obtener acceso privilegiado y ejecutar comandos con alto impacto (C:H I:H A:H).

Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.

🛡️ Mitigaciones ATT&CK que cubren estas técnicas

Privileged Account ManagementVulnerability ScanningRestrict Web-Based ContentPassword PoliciesNetwork SegmentationMulti-factor Authentication

Tecnologías afectadas (1)

Sophos — Firewall Firmware

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-12728",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-12728",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-12-20T00:00:00+00:00"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security-alert@sophos.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 9.8,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "security-alert@sophos.com",
      "affectedData": [
        {
          "vendor": "Sophos",
          "product": "Sophos Firewall",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "20.0 MR3 (20.0.3)",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2024-12-19T21:15:07.863",
  "references": [
    {
      "url": "https://www.sophos.com/en-us/security-advisories/sophos-sa-20241219-sfos-rce",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "security-alert@sophos.com"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security-alert@sophos.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-1391"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A weak credentials vulnerability potentially allows privileged system access via SSH to Sophos Firewall older than version 20.0 MR3 (20.0.3)."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de credenciales débiles permite potencialmente el acceso privilegiado al sistema a través de SSH a Sophos Firewall anterior a la versión 20.0 MR3 (20.0.3)."
    }
  ],
  "lastModified": "2026-06-17T07:00:21.640",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:sophos:firewall_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6B363A0D-0A63-4970-BC4C-D4A5A8DED8C9",
              "versionEndExcluding": "20.0.3"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:sophos:firewall:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "2F728103-324C-4F34-9EE6-6E922018A2EB"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "security-alert@sophos.com"
}