A code injection vulnerability allows adjacent malicious users to execute code in the Wifi controller of Sophos Firewall releases older than version 19.5 GA.
sophos xg_firewall_firmware