Exploited Vulnerabilities DailyCVE-2020-12271: Sophos SFOS
EPSS42.4%No. 919 of 1739 in KEV
CVE year2020~1 yrs before listing
Same vendor in KEV7
Same product1
| Field | Value |
|---|---|
| Vendor | Sophos |
| Product | SFOS |
| Name | Sophos SFOS SQL Injection Vulnerability |
| Added to KEV | 2021-11-03 |
| US federal due date | 2022-05-03 |
| Ransomware use | Known |
| CWE | CWE-89 |
CISA description
Sophos Firewall operating system (SFOS) firmware contains a SQL injection vulnerability when configured with either the administration (HTTPS) service or the User Portal is exposed on the WAN zone. Successful exploitation may cause remote code execution to exfiltrate usernames and hashed passwords for the local device admin(s), portal admins, and user accounts used for remote access (but not external Active Directory or LDAP passwords).
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
A Sophos SFOS vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2021-11-03.