Sophos
7 CVEs in CISA KEV — 2 with confirmed ransomware use
Products
| CVE | Product | CVSS | EPSS | Added | Due | Flags | Description |
|---|---|---|---|---|---|---|---|
CVE-2023-1671 |
Web Appliance | — | 1.0000 | 2023-11-16 | 2023-12-07 | Sophos Web Appliance contains a command injection vulnerability in the warn-proc | |
CVE-2022-3236 |
Firewall | — | 0.9890 | 2022-09-23 | 2022-10-14 | A code injection vulnerability in the User Portal and Webadmin of Sophos Firewal | |
CVE-2020-15069 |
XG Firewall | — | — | 2025-02-06 | 2025-02-27 | Sophos XG Firewall contains a buffer overflow vulnerability that allows for remo | |
CVE-2020-29574 |
CyberoamOS | — | — | 2025-02-06 | 2025-02-27 | RW | CyberoamOS (CROS) contains a SQL injection vulnerability in the WebAdmin that al |
CVE-2022-1040 |
Firewall | — | — | 2022-03-31 | 2022-04-21 | An authentication bypass vulnerability in User Portal and Webadmin of Sophos Fir | |
CVE-2020-25223 |
SG UTM | — | — | 2022-03-25 | 2022-04-15 | A remote code execution vulnerability exists in the WebAdmin of Sophos SG UTM. | |
CVE-2020-12271 |
SFOS | — | — | 2021-11-03 | 2022-05-03 | RW | Sophos Firewall operating system (SFOS) firmware contains a SQL injection vulner |