CVE-2020-17352 | BDVDB-2026-139840 Detail

Description#

Two OS command injection vulnerabilities in the User Portal of Sophos XG Firewall through 2020-08-05 potentially allow an authenticated attacker to remotely execute arbitrary code.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://community.sophos.com/b/security-blog
https://community.sophos.com/b/security-blog/posts/advisory-resolved-authenticated-rce-issues-in-user-portal-cve-2020-17352

Exploit#

No public exploit known

History#

Version 12020-08-07Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.