CVE-2020-15069

UNKNOWNKnown Exploited

CISA Known Exploited Vulnerability

https://community.sophos.com/b/security-blog/posts/advisory-buffer-overflow-vulnerability-in-user-portal ; https://nvd.nist.gov/vuln/detail/CVE-2020-15069

Remediation deadline: February 27, 2025

Description

Sophos XG Firewall contains a buffer overflow vulnerability that allows for remote code execution via the "HTTP/S bookmark" feature.

Timeline

Published:February 6th, 2025 12:00 AM

Last modified:February 6th, 2025 12:00 AM

Added to KEV:February 6th, 2025

CVSS Scoring

No CVSS v3 score available

Affected Software

From NVD CPE configuration data

Vendors

Sophos

Products

XG Firewall

Weaknesses (CWE)

CWE-120

References & Reports

Advisories, patches, and third-party reports

No references available.

Source: CISA KEV + NVD · Data may lag official sources by up to one minute