Actively exploited · Published Jun 29, 2020 · Assigned by mitre
CVE-2020-15069
Critical 9.8 Exploited
In plain English
A critical-severity buffer overflow in XG Firewall from Sophos. Attackers are actively exploiting it in the wild (listed by CISA on February 6, 2025). The chance it is exploited in the next 30 days is estimated at 10.7% (higher than 96% of all known vulnerabilities). Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CISA guidance
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Federal agencies must remediate by Feb 27, 2025.
Official description
Sophos XG Firewall 17.x through v17.5 MR12 allows a Buffer Overflow and remote code execution via the HTTP/S Bookmarks feature for clientless access. Hotfix HF062020.1 was published for all firewalls running v17.x.
Affected products (as reported)
Weakness: CWE-120 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H