CVE-2020-15069criticalunder attackCWE-120

CVE-2020-15069

Published · Updated

Follow this CVE+ Monitor XG Firewall

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

63Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA.

ssvc Actcvss 9.8epss 11%
from disclosure to weapon
Published on NVDJun 29
CISA KEV+1683d
Action required by CISAfederal deadline: 2025-02-27

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

In short

The Sophos XG Firewall has a buffer overflow vulnerability in its web-based bookmarks feature that allows attackers to run malicious code remotely without authentication. This is a critical flaw because it can give attackers complete control over the firewall.

Technical detail

A buffer overflow exists in the HTTP/S Bookmarks functionality of Sophos XG Firewall v17.x through v17.5 MR12, exploitable remotely without authentication. The vulnerability allows arbitrary code execution with firewall privileges. Mitigation requires applying hotfix HF062020.1 or upgrading to patched versions.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

Sophos XG Firewall 17.x through v17.5 MR12 allows a Buffer Overflow and remote code execution via the HTTP/S Bookmarks feature for clientless access. Hotfix HF062020.1 was published for all firewalls running v17.x.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/a