Known Exploited Vulnerabilities February 06, 2025 · CISA KEV Catalog

CVE-2020-29574: CyberoamOS (CROS) SQL Injection Vulnerability

CyberoamOS (CROS) contains a SQL injection vulnerability in the WebAdmin that allows an unauthenticated attacker to execute arbitrary SQL statements remotely.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2020-29574 Sophos
Related: CVE-2020-15069: Sophos XG Firewall Buffer Overflow Vulnerability Known Exploited Vulnerabilities · Feb 06, 2025
CVE-2023-1671: Sophos Web Appliance Command Injection Vulnerability Known Exploited Vulnerabilities · Nov 16, 2023
CVE-2022-3236: Sophos Firewall Code Injection Vulnerability Known Exploited Vulnerabilities · Sep 23, 2022