Critical severity9.8CISA KEVNVD Advisory· Published Dec 11, 2020· Updated Aug 15, 2026

CVE-2020-29574

Description

An SQL injection vulnerability in the WebAdmin of Cyberoam OS through 2020-12-04 allows unauthenticated attackers to execute arbitrary SQL statements remotely.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Sophos/Cyberoamos
cpe:2.3:o:sophos:cyberoamos:*:*:*:*:*:*:*:*
Range: <=2020-12-04
Cyberoam/OSdescription
Cyberoam/Cyberoamosllm-fuzzy
Range: <=2020-12-04
Sophos/Cyberoamllm-fuzzy
Range: <=2020-12-04

Patches

Vulnerability mechanics

References

www.bleepingcomputer.com/news/security/sophos-fixes-sql-injection-vulnerability-in-their-cyberoam-os/nvdThird Party Advisory
www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
www.cyberoam.com/ngfw.htmlnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.004
exploit	0.000
kev	0.120
patch	0.000
ransomware	0.060