CVE Intelligence

Sophos vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Sophos products: 7 record(s), with severity, exploitation and fixes.

Sophos Firewall 2Sfos 2Xg Firewall Firmware 1Web Appliance 1Unified Threat Management 1Cyberoamos 1

Exploited only (KEV) →

CVE-2023-1671 Critical · 9.8 KEV Urgent · 81 Public exploit CWE-77 Apr 4, 2023
Sophos Web Appliance Command Injection Vulnerability
A pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance older than version 4.3.10.4 allows execution of arbitrary code.
CVE-2022-3236 Critical · 9.8 KEV High · 64 Public exploit CWE-94 Sep 23, 2022
Sophos Firewall Code Injection Vulnerability
A code injection vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v19.0 MR1 and older.
CVE-2022-1040 Critical · 9.8 KEV Urgent · 81 Public exploit Mar 25, 2022
Sophos Firewall Authentication Bypass Vulnerability
An authentication bypass vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v18.5 MR3 and older.
CVE-2020-29574 Critical · 9.8 KEV Urgent · 72 Ransomware CWE-89 Dec 11, 2020
CyberoamOS (CROS) SQL Injection Vulnerability
An SQL injection vulnerability in the WebAdmin of Cyberoam OS through 2020-12-04 allows unauthenticated attackers to execute arbitrary SQL statements remotely.
CVE-2020-25223 Critical · 9.8 KEV Urgent · 79 Public exploit CWE-78 Sep 25, 2020
Sophos SG UTM Remote Code Execution Vulnerability
A remote code execution vulnerability exists in the WebAdmin of Sophos SG UTM before v9.705 MR5, v9.607 MR7, and v9.511 MR11
CVE-2020-15069 Critical · 9.8 KEV High · 62 CWE-120 Jun 29, 2020
Sophos XG Firewall Buffer Overflow Vulnerability
Sophos XG Firewall 17.x through v17.5 MR12 allows a Buffer Overflow and remote code execution via the HTTP/S Bookmarks feature for clientless access. Hotfix HF062020.1 was published for all firewalls running v17.x.
CVE-2020-12271 Critical · 9.8 KEV Urgent · 73 Ransomware CWE-89 Apr 27, 2020
Sophos SFOS SQL Injection Vulnerability
A SQL injection issue was found in SFOS 17.0, 17.1, 17.5, and 18.0 before 2020-04-25 on Sophos XG Firewall devices, as exploited in the wild in April 2020. This affected devices configured with either the administration (HTTPS) service or the User Portal exposed on the WAN zone. A successful attack may have caused remote code execution that exfiltrated usernames and hashed passwords for the local device admin(s), portal admins, and user accounts used for remote access (but not external Active Directory or LDAP passwords)