CVE-2020-29574Used in ransomware
SO
Sophos CyberoamOS
CyberoamOS (CROS) SQL Injection Vulnerability
What it is
CyberoamOS (CROS) contains a SQL injection vulnerability in the WebAdmin that allows an unauthenticated attacker to execute arbitrary SQL statements remotely.
What to do
The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other Sophos entries on the list
- XG Firewall Sophos XG Firewall Buffer Overflow Vulnerability CVE-2020-15069 · Feb 6, 2025
- Web Appliance Sophos Web Appliance Command Injection Vulnerability CVE-2023-1671 · Nov 16, 2023
- Firewall Sophos Firewall Code Injection Vulnerability CVE-2022-3236 · Sep 23, 2022
- Firewall Sophos Firewall Authentication Bypass Vulnerability CVE-2022-1040 · Mar 31, 2022
- SG UTM Sophos SG UTM Remote Code Execution Vulnerability CVE-2020-25223 · Mar 25, 2022
- SFOS Sophos SFOS SQL Injection Vulnerability CVE-2020-12271 · Nov 3, 2021