CVE-2020-25223: Sophos SG UTM Remote Code Execution Vulnerability
First published: Fri Sep 25 2020(Updated: )
A remote code execution vulnerability exists in the WebAdmin of Sophos SG UTM before v9.705 MR5, v9.607 MR7, and v9.511 MR11
Credit: cve@mitre.org cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Sophos Unified Threat Management | <9.511 | |
| Sophos Unified Threat Management | >=9.600<9.607 | |
| Sophos Unified Threat Management | >=9.700<9.705 | |
| Sophos Unified Threat Management | =9.511 | |
| Sophos Unified Threat Management | =9.607 | |
| Sophos Unified Threat Management | =9.705 | |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://packetstormsecurity.com/files/164697/Sophos-UTM-WebAdmin-SID-Command-Injection.html
- https://community.sophos.com/b/security-blog
- https://community.sophos.com/b/security-blog/posts/advisory-resolved-rce-in-sg-utm-webadmin-cve-2020-25223
- https://cwe.mitre.org/data/definitions/78.html
- https://www.secpod.com/blog/remote-code-execution-in-sophos-utm/
- https://nvd.nist.gov/vuln/detail/CVE-2020-25223
Frequently Asked Questions
What is the vulnerability ID of this Sophos SG UTM vulnerability?
The vulnerability ID is CVE-2020-25223.
What is the title of this vulnerability?
The title of this vulnerability is Sophos SG UTM Remote Code Execution Vulnerability.
What is the severity of CVE-2020-25223?
The severity of CVE-2020-25223 is critical with a severity value of 9.8.
Which software versions are affected by CVE-2020-25223?
The affected software versions are Sophos SG UTM before v9.705 MR5, v9.607 MR7, and v9.511 MR11.
How can I fix CVE-2020-25223?
To fix CVE-2020-25223, it is recommended to update to the latest version of Sophos SG UTM.
Is there any reference material available for this vulnerability?
Yes, there are reference materials available at: http://packetstormsecurity.com/files/164697/Sophos-UTM-WebAdmin-SID-Command-Injection.html and https://community.sophos.com/b/security-blog
- collector/nvd-index
- agent/author
- agent/type
- agent/softwarecombine
- agent/title
- agent/severity
- agent/weakness
- agent/description
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- exploited/true
- collector/cisa-known-exploited
- source/CISA
- agent/references
- agent/tags
- collector/nvd-cve
- vendor/sophos
- canonical/sophos unified threat management
- version/sophos unified threat management/9.600
- version/sophos unified threat management/9.700
- version/sophos unified threat management/9.511
- version/sophos unified threat management/9.607
- version/sophos unified threat management/9.705
- canonical/sophos sg utm