Skip to main content
Cyber Retaliator Solutions
Cyber RetaliatorSolutions
All vulnerabilities
CVE-2020-25223

Sophos SG UTM Remote Code Execution Vulnerability

Sophos — SG UTM

Added to KEV catalog
25 March 2022
Federal remediation due date
15 April 2022
Weakness classification (CWE)
CWE-78

CISA Description

A remote code execution vulnerability exists in the WebAdmin of Sophos SG UTM.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2020-25223

View on NVD View on MITRE CVE View full CISA catalog

More Sophos Vulnerabilities

CVE-2020-15069

Sophos XG Firewall Buffer Overflow Vulnerability

CVE-2020-29574

CyberoamOS (CROS) SQL Injection Vulnerability

CVE-2023-1671

Sophos Web Appliance Command Injection Vulnerability

CVE-2022-3236

Sophos Firewall Code Injection Vulnerability

CVE-2022-1040

Sophos Firewall Authentication Bypass Vulnerability

Confirm Your Exposure

Is this vulnerability present in your environment?

CRS delivers independent VAPT assessments that identify exactly which known-exploited vulnerabilities exist in your network, applications, and infrastructure.

Explore VAPT Services