CVE-2020-15069

Description

Sophos XG Firewall 17.x through v17.5 MR12 allows a Buffer Overflow and remote code execution via the HTTP/S Bookmarks feature for clientless access. Hotfix HF062020.1 was published for all firewalls running v17.x.

Scoring

• CVSS: 9.8 (CRITICAL, 3.1)
• EPSS exploitation probability: Not yet available
• EPSS percentile: Not yet available

CISA KEV status

• Added to KEV: 2025-02-06
• Remediation due date: 2025-02-27
• Known ransomware campaign use: Unknown

Weakness types (CWE)

• CWE-120
• CWE-120

References

• https://community.sophos.com/b/security-blog/posts/advisory-buffer-overflow-vulnerability-in-user-portal
• https://community.sophos.com/b/security-blog/posts/advisory-buffer-overflow-vulnerability-in-user-portal
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-15069

More from Sophos

• CVE-2020-29574 — CyberoamOS
• CVE-2023-1671 — Web Appliance
• CVE-2022-3236 — Firewall
• CVE-2022-1040 — Firewall
• CVE-2020-25223 — SG UTM