Known Exploited Vulnerabilities November 03, 2021 · CISA KEV Catalog

CVE-2020-12271: Sophos SFOS SQL Injection Vulnerability

Sophos Firewall operating system (SFOS) firmware contains a SQL injection vulnerability when configured with either the administration (HTTPS) service or the User Portal is exposed on the WAN zone. Successful exploitation may cause remote code execution to exfiltrate usernames and hashed passwords for the local device admin(s), portal admins, and user accounts used for remote access (but not external Active Directory or LDAP passwords).

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2020-12271 Sophos
Related: CVE-2020-29574: CyberoamOS (CROS) SQL Injection Vulnerability Known Exploited Vulnerabilities · Feb 06, 2025
CVE-2020-15069: Sophos XG Firewall Buffer Overflow Vulnerability Known Exploited Vulnerabilities · Feb 06, 2025
CVE-2023-1671: Sophos Web Appliance Command Injection Vulnerability Known Exploited Vulnerabilities · Nov 16, 2023