peter bassill · operator
$ cve CVE-2020-15069 JSON

CVE-2020-15069 KEV

9.8
CRITICAL · CVSS 3.1 · EPSS 10.7% (pctl 96)

Patch first

On CISA KEV — known exploited in the wild, due 2025-02-27.

Description

Sophos XG Firewall 17.x through v17.5 MR12 allows a Buffer Overflow and remote code execution via the HTTP/S Bookmarks feature for clientless access. Hotfix HF062020.1 was published for all firewalls running v17.x.

Scoring

CVSS9.8 (CRITICAL, v3.1)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS10.67% — more likely to be exploited than 96% of all CVEs
WeaknessCWE-120
On CISA KEVyes — remediate by 2025-02-27
Public exploitnone known
Published2020-06-29
Last modified2026-06-17

CISA KEV

NameSophos XG Firewall Buffer Overflow Vulnerability
Added2025-02-06
Due2025-02-27
Vendor / productSophos / XG Firewall
Ransomware usenone reported

Affected (2)

VendorProduct
sophosxg firewall
sophosxg firewall firmware

References

→ the Explorer  ·  watch your stack  ·  NVD