PT-2020-17197 · Cyberoam · Cyberoamos
CVE-2020-29574
·
Published
2020-12-11
·
Updated
2026-08-15
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Cyberoam OS versions prior to 2020-12-04
Description
An SQL injection vulnerability in the WebAdmin of Cyberoam OS allows unauthenticated attackers to execute arbitrary SQL statements remotely.
Recommendations
For versions prior to 2020-12-04, update to a version released after 2020-12-04 to resolve the issue. As a temporary workaround, consider restricting access to the WebAdmin interface until a patch is available.
Fix
SQL injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Cyberoamos