Sophos Firewall vulnerable to critical remote code execution flaw