PT-2020-14919
CVE-2020-17352
·
Published
2020-08-07
·
Updated
2020-08-12
Description by
CVSS 3.1
8.8
HighMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Sophos XG Firewall versions prior to 2020-08-05
Description
The issue concerns two OS command injection vulnerabilities in the User Portal of Sophos XG Firewall. These vulnerabilities potentially allow an authenticated attacker to remotely execute arbitrary code.
Recommendations
For versions prior to 2020-08-05, update to a version released after 2020-08-05 to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾