[ Vendor · 7 CVEs ]
Sophos
CVEs affecting Sophos published in the last 30 days, plus any Sophos CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2023-1671 | 4 Apr 2023 | CVSS 9.8 | Sophos Web Appliance Command InjectionA pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance older than version 4.3.10.4 allows execution of… | Exploited |
| CVE-2022-3236 | 23 Sep 2022 | CVSS 9.8 | Sophos Firewall Code InjectionA code injection vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v19.0 MR1 and… | Exploited |
| CVE-2022-1040 | 25 Mar 2022 | CVSS 9.8 | Sophos Firewall Authentication BypassAn authentication bypass vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v18.5 MR3… | Exploited |
| CVE-2020-29574 | 11 Dec 2020 | CVSS 9.8 | CyberoamOS (CROS) SQL InjectionAn SQL injection vulnerability in the WebAdmin of Cyberoam OS through 2020-12-04 allows unauthenticated attackers to execute arbitrary SQL statements… | Exploited |
| CVE-2020-25223 | 25 Sep 2020 | CVSS 9.8 | Sophos SG UTM Remote Code ExecutionA remote code execution vulnerability exists in the WebAdmin of Sophos SG UTM before v9.705 MR5, v9.607 MR7, and v9.511 MR11 | Exploited |
| CVE-2020-15069 | 29 Jun 2020 | CVSS 9.8 | Sophos XG Firewall Buffer OverflowSophos XG Firewall 17.x through v17.5 MR12 allows a Buffer Overflow and remote code execution via the HTTP/S Bookmarks feature for clientless access… | Exploited |
| CVE-2020-12271 | 27 Apr 2020 | CVSS 9.8 | Sophos SFOS SQL InjectionA SQL injection issue was found in SFOS 17.0, 17.1, 17.5, and 18.0 before 2020-04-25 on Sophos XG Firewall devices, as exploited in the wild in April… | Exploited |