CVE-2020-15069
SO
Sophos XG Firewall
Sophos XG Firewall Buffer Overflow Vulnerability
What it is
Sophos XG Firewall contains a buffer overflow vulnerability that allows for remote code execution via the "HTTP/S bookmark" feature.
What to do
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Vendor notices and references
- community.sophos.com/b/security-blog/posts/advisory-buffer-overflow-vulnerability-in-user-
- nvd.nist.gov/vuln/detail/CVE-2020-15069
Description and required action as published by CISA. Full record at NVD.
Other Sophos entries on the list
- CyberoamOS CyberoamOS (CROS) SQL Injection Vulnerability CVE-2020-29574 · Feb 6, 2025
- Web Appliance Sophos Web Appliance Command Injection Vulnerability CVE-2023-1671 · Nov 16, 2023
- Firewall Sophos Firewall Code Injection Vulnerability CVE-2022-3236 · Sep 23, 2022
- Firewall Sophos Firewall Authentication Bypass Vulnerability CVE-2022-1040 · Mar 31, 2022
- SG UTM Sophos SG UTM Remote Code Execution Vulnerability CVE-2020-25223 · Mar 25, 2022
- SFOS Sophos SFOS SQL Injection Vulnerability CVE-2020-12271 · Nov 3, 2021