Exploit / PoCcritical
Are you using a Sophos UTM appliance? Be sure it is up to date!
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2020-25223 | Unauthenticated Command Injection RCE in Sophos SG UTM WebAdmin | 9.8 | 97% | KEVPoC ×2 | KEV |
From the original article
2 min read at securityaffairs.com
A researcher disclosed technical details of a critical remote code execution vulnerability, tracked as CVE-2020-25223, patched last year. In September, Sophos addressed a remote code execution vulnerability (CVE-2020-25223) in the WebAdmin of SG UTM that was reported via the company bug bounty program.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.