CVE-2023-5552

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A password disclosure vulnerability in the Secure PDF eXchange (SPX) feature allows attackers with full email access to decrypt PDFs in Sophos Firewall version 19.5 MR3 (19.5.3) and older, if the password type is set to “Specified by sender”.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200 CWE-522

Affected software

Vendor	Product	Versions
Sophos	Sophos Firewall	—

References

https://www.sophos.com/en-us/security-advisories/sophos-sa-20231017-spx-passwordVendor Advisory
https://www.sophos.com/en-us/security-advisories/sophos-sa-20231017-spx-passwordVendor Advisory

Timeline

Published: Oct 18, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-55536.8During internal Axis Security Development Model (ASDM) threat-modelling, a flaw was found in the protection for device tampering (commonly k CVE-2023-55549.8Lack of TLS certificate verification in log transmission of a financial module within LINE client for iOS prior to 13.16.0.CVE-2023-55556.1Cross-site Scripting (XSS) - Generic in GitHub repository frappe/lms prior to 5614a6203fb7d438be8e2b1e3030e4528d170ec4.CVE-2023-55566.1Cross-site Scripting (XSS) - Reflected in GitHub repository structurizr/onpremises prior to 3194.CVE-2023-55577.7A flaw was found in the tracker-miners package. A weakness in the sandbox allows a maliciously-crafted file to execute code outside the sand CVE-2023-55586.1The LearnPress WordPress plugin before 4.2.5.5 does not sanitise and escape user input before outputting it back in the page, leading to a R CVE-2023-55599.1The 10Web Booster WordPress plugin before 2.24.18 does not validate the option name given to some AJAX actions, allowing unauthenticated use CVE-2023-55606.1The WP-UserOnline WordPress plugin before 2.88.3 does not sanitise and escape the X-Forwarded-For header before outputting its content on th CVE-2023-55615.3WordPress does not properly restrict which user fields are searchable via the REST API, allowing unauthenticated attackers to discern the em CVE-2023-55626.1An unsafe default configuration in KNIME Analytics Platform before 5.2.0 allows for a cross-site scripting attack. When KNIME Analytics Plat CVE-2023-55637.5The SJA1000 CAN controller driver backend automatically attempt to recover from a bus-off event when built with CONFIG_CAN_AUTO_BUS_OFF_RECO CVE-2023-55644.8Cross-site Scripting (XSS) - Stored in GitHub repository froxlor/froxlor prior to 2.1.0-dev1.