What it is
A remote code execution vulnerability exists in the WebAdmin of Sophos SG UTM.
What to do
Apply updates per vendor instructions.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other Sophos entries on the list
- CyberoamOS CyberoamOS (CROS) SQL Injection Vulnerability CVE-2020-29574 · Feb 6, 2025
- XG Firewall Sophos XG Firewall Buffer Overflow Vulnerability CVE-2020-15069 · Feb 6, 2025
- Web Appliance Sophos Web Appliance Command Injection Vulnerability CVE-2023-1671 · Nov 16, 2023
- Firewall Sophos Firewall Code Injection Vulnerability CVE-2022-3236 · Sep 23, 2022
- Firewall Sophos Firewall Authentication Bypass Vulnerability CVE-2022-1040 · Mar 31, 2022
- SFOS Sophos SFOS SQL Injection Vulnerability CVE-2020-12271 · Nov 3, 2021