CVE-2020-17352

sophos xg firewall firmware

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2020-17352

Katalog CVE

CVSS 8.8 · High EPSS 4,1%

Kerentanan Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') pada sophos xg firewall firmware. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

Two OS command injection vulnerabilities in the User Portal of Sophos XG Firewall through 2020-08-05 potentially allow an authenticated attacker to remotely execute arbitrary code.

Rincian

Terbit di NVD
7 Agustus 2020
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
EPSS (30 hari)
4,1% peluang dieksploitasi; lebih tinggi dari 90,5% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
sophos xg firewall firmware Versi 17.5
sophos xg firewall firmware Versi 17.5 maintenance_release1
sophos xg firewall firmware Versi 17.5 maintenance_release10
sophos xg firewall firmware Versi 17.5 maintenance_release11
sophos xg firewall firmware Versi 17.5 maintenance_release12
sophos xg firewall firmware Versi 17.5 maintenance_release3
sophos xg firewall firmware Versi 17.5 maintenance_release4
sophos xg firewall firmware Versi 17.5 maintenance_release5
sophos xg firewall firmware Versi 17.5 maintenance_release6
sophos xg firewall firmware Versi 17.5 maintenance_release7
sophos xg firewall firmware Versi 17.5 maintenance_release8
sophos xg firewall firmware Versi 17.5 maintenance_release9
sophos xg firewall firmware Versi 18.0
sophos xg firewall firmware Versi 18.0 mr1

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.