Exploit / PoCcritical

FBI Seeks Public Help to Identify Chinese Hackers Behind Global Cyber Intrusions

The Hacker Newsby @TheHackersNewsNov 11, 2024 · 05:16 UTC (Nov 11, 2024)5 min read3 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2020-12271 CVE-2020-15069 CVE-2020-29574 CVE-2022-1040 CVE-2022-3236

Tags: cve-2020-12271 cve-2020-15069 cve-2020-29574 cve-2022-1040 cve-2022-3236 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2020-12271	SQL Injection RCE in Sophos SFOS Firewalls with WAN-Exposed Admin or User Portal	9.8	42%	KEVRansomwarePoC	Apr 27, 2020 KEV Nov 3, 2021
CVE-2020-15069	Unauthenticated Buffer Overflow RCE in Sophos XG Firewall	9.8	11%	KEV	Jun 29, 2020 KEV Feb 6, 2025
CVE-2020-29574	Unauthenticated SQL Injection in Sophos CyberoamOS WebAdmin	9.8	5%	KEVRansomware	Dec 11, 2020 KEV Feb 6, 2025
CVE-2022-1040	Authentication Bypass Leading to Unauthenticated RCE in Sophos Firewall (SFOS)	9.8	100%	KEVPoC ×2	Mar 25, 2022 KEV Mar 31, 2022
CVE-2022-3236	Unauthenticated Code Injection RCE in Sophos Firewall (User Portal/Webadmin)	9.8	99%	KEV	Sep 23, 2022 KEV Sep 23, 2022

From the original article

5 min read at thehackernews.com

The U. S. Federal Bureau of Investigation (FBI) has sought assistance from the public in connection with an investigation involving the breach of edge devices and computer networks belonging to companies and government entities.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.