Sophos
7 vulnerabilities in Sophos products that CISA lists as exploited.
| CVE | Vendor | Product | Name | Added | Fix due | Ransomware |
|---|---|---|---|---|---|---|
| CVE-2020-15069 | Sophos | XG Firewall | Sophos XG Firewall Buffer Overflow Vulnerability | 6 Feb 2025 | 27 Feb 2025 | Unknown |
| CVE-2020-29574 | Sophos | CyberoamOS | CyberoamOS (CROS) SQL Injection Vulnerability | 6 Feb 2025 | 27 Feb 2025 | Known |
| CVE-2023-1671 | Sophos | Web Appliance | Sophos Web Appliance Command Injection Vulnerability | 16 Nov 2023 | 7 Dec 2023 | Unknown |
| CVE-2022-3236 | Sophos | Firewall | Sophos Firewall Code Injection Vulnerability | 23 Sep 2022 | 14 Oct 2022 | Unknown |
| CVE-2022-1040 | Sophos | Firewall | Sophos Firewall Authentication Bypass Vulnerability | 31 Mar 2022 | 21 Apr 2022 | Unknown |
| CVE-2020-25223 | Sophos | SG UTM | Sophos SG UTM Remote Code Execution Vulnerability | 25 Mar 2022 | 15 Apr 2022 | Unknown |
| CVE-2020-12271 | Sophos | SFOS | Sophos SFOS SQL Injection Vulnerability | 3 Nov 2021 | 3 May 2022 | Known |