pwn.watch: Sophos incident updates

[critical] Sophos CyberoamOS: CyberoamOS (CROS) SQL Injection Vulnerability

Thu, 06 Feb 2025 00:00:00 GMT

CyberoamOS (CROS) contains a SQL injection vulnerability in the WebAdmin that allows an unauthenticated attacker to execute arbitrary SQL statements remotely. Added to CISA KEV on 2025-02-06.

Status: closed · Patch: unpatched · Fixed in: None: CISA says the product is end-of-life; discontinue use

Latest updates:

2025-02-06: CISA added CVE-2020-29574 to the KEV catalog (due 2025-02-27).

CVEs: CVE-2020-29574

[critical] Sophos XG Firewall: XG Firewall Buffer Overflow Vulnerability

Thu, 06 Feb 2025 00:00:00 GMT

Sophos XG Firewall contains a buffer overflow vulnerability that allows for remote code execution via the "HTTP/S bookmark" feature. Added to CISA KEV on 2025-02-06.

Status: closed · Patch: patched · Fixed in: See vendor advisory linked in sources

Latest updates:

2025-02-06: CISA added CVE-2020-15069 to the KEV catalog (due 2025-02-27).

CVEs: CVE-2020-15069

[critical] Sophos Web Appliance: Command Injection (CVE-2023-1671)

Thu, 16 Nov 2023 00:00:00 GMT

Sophos Web Appliance contains a command injection vulnerability in the warn-proceed handler that allows for remote code execution. Added to CISA KEV on 2023-11-16.

Status: closed · Patch: patched · Fixed in: See vendor advisory linked in sources

Latest updates:

2023-11-16: CISA added CVE-2023-1671 to the KEV catalog (due 2023-12-07).

CVEs: CVE-2023-1671