Actively exploited · Published Dec 11, 2020 · Assigned by mitre
CVE-2020-29574
Critical 9.8 Exploited Ransomware
In plain English
A critical-severity SQL injection in CyberoamOS from Sophos. Attackers are actively exploiting it in the wild (listed by CISA on February 6, 2025). It has been used in ransomware campaigns. The chance it is exploited in the next 30 days is estimated at 4.7% (higher than 92% of all known vulnerabilities). The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.
CISA guidance
The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.
Federal agencies must remediate by Feb 27, 2025.
Official description
An SQL injection vulnerability in the WebAdmin of Cyberoam OS through 2020-12-04 allows unauthenticated attackers to execute arbitrary SQL statements remotely.
Affected products (as reported)
Weakness: CWE-89 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H