National Cyber Security Centre
Printable version

NCSC statement: Sophos vulnerability

An NCSC statement following the discovery of a vulnerability affecting the Sophos XG Firewall product.

Image of an antivirus alert on a desktop computer

Last week cyber security company Sophos reported its XG Firewall product had been subject to a Structured Query Language (SQL) injection attack. The company said that customised malware known as ‘Asnarok’ was used to gain access to vulnerable physical and virtual XG Firewall devices.

Sophos have released a hot fix for devices that have auto-update turned on. All customers should take note of the further advice on remediation, whether they have received the hot fix or not.

An NCSC spokesperson yesterday said:

“We are aware of a vulnerability affecting a Sophos firewall product.

“The NCSC recommends following vendor best practice advice in the mitigation of vulnerabilities.

“Users should to check their device to ensure auto-updates are turned on and they are using the latest version of the application.”

Further information:


Channel website:

Original article link:

Share this article

Latest News from
National Cyber Security Centre