Critical severity9.8CISA KEVNVD Advisory· Published Jun 29, 2020· Updated Jun 17, 2026
CVE-2020-15069
CVE-2020-15069
Description
Sophos XG Firewall 17.x through v17.5 MR12 allows a Buffer Overflow and remote code execution via the HTTP/S Bookmarks feature for clientless access. Hotfix HF062020.1 was published for all firewalls running v17.x.
Affected products
15cpe:2.3:o:sophos:xg_firewall_firmware:*:*:*:*:*:*:*:*+ 12 more
- cpe:2.3:o:sophos:xg_firewall_firmware:*:*:*:*:*:*:*:*range: >=17.0,<17.5
- cpe:2.3:o:sophos:xg_firewall_firmware:17.5:-:*:*:*:*:*:*
- cpe:2.3:o:sophos:xg_firewall_firmware:17.5:maintenance_release10:*:*:*:*:*:*
- cpe:2.3:o:sophos:xg_firewall_firmware:17.5:maintenance_release11:*:*:*:*:*:*
- cpe:2.3:o:sophos:xg_firewall_firmware:17.5:maintenance_release12:*:*:*:*:*:*
- cpe:2.3:o:sophos:xg_firewall_firmware:17.5:maintenance_release1:*:*:*:*:*:*
- cpe:2.3:o:sophos:xg_firewall_firmware:17.5:maintenance_release3:*:*:*:*:*:*
- cpe:2.3:o:sophos:xg_firewall_firmware:17.5:maintenance_release4:*:*:*:*:*:*
- cpe:2.3:o:sophos:xg_firewall_firmware:17.5:maintenance_release5:*:*:*:*:*:*
- cpe:2.3:o:sophos:xg_firewall_firmware:17.5:maintenance_release6:*:*:*:*:*:*
- cpe:2.3:o:sophos:xg_firewall_firmware:17.5:maintenance_release7:*:*:*:*:*:*
- cpe:2.3:o:sophos:xg_firewall_firmware:17.5:maintenance_release8:*:*:*:*:*:*
- cpe:2.3:o:sophos:xg_firewall_firmware:17.5:maintenance_release9:*:*:*:*:*:*
- Sophos/XG Firewalldescription
- Range: <=v17.5 MR12
Patches
Vulnerability mechanics
References
2- community.sophos.com/b/security-blog/posts/advisory-buffer-overflow-vulnerability-in-user-portalnvdMitigationVendor Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
News mentions
0No linked articles in our index yet.