Home

CVE-2020-15069

Description

Sophos XG Firewall 17.x through v17.5 MR12 allows a Buffer Overflow and remote code execution via the HTTP/S Bookmarks feature for clientless access. Hotfix HF062020.1 was published for all firewalls running v17.x.

Risk Information

Base Score
9.8
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
82.581

Associated Vulnerability

VulnerabilityOS Platform
Vulnerabilities CVE-2020-15069 ,CVE-2020-15504 are affected in xg_firewall_firmware 17.0 NCM
Vulnerabilities CVE-2020-15069 ,CVE-2020-15504 ,CVE-2020-17352 are affected in xg_firewall_firmware 17.5 NCM
Vulnerabilities CVE-2020-15069 ,CVE-2020-15504 ,CVE-2020-17352 are affected in xg_firewall_firmware 17.5-maintenance_release1 NCM
Vulnerabilities CVE-2020-15069 ,CVE-2020-15504 ,CVE-2020-17352 are affected in xg_firewall_firmware 17.5-maintenance_release10 NCM
Vulnerabilities CVE-2020-15069 ,CVE-2020-15504 ,CVE-2020-17352 are affected in xg_firewall_firmware 17.5-maintenance_release11 NCM
Vulnerabilities CVE-2020-15069 ,CVE-2020-15504 ,CVE-2020-17352 are affected in xg_firewall_firmware 17.5-maintenance_release12 NCM
Vulnerabilities CVE-2020-15069 ,CVE-2020-15504 ,CVE-2020-17352 are affected in xg_firewall_firmware 17.5-maintenance_release3 NCM
Vulnerabilities CVE-2020-15069 ,CVE-2020-15504 ,CVE-2020-17352 are affected in xg_firewall_firmware 17.5-maintenance_release4 NCM
Vulnerabilities CVE-2020-15069 ,CVE-2020-15504 ,CVE-2020-17352 are affected in xg_firewall_firmware 17.5-maintenance_release5 NCM
Vulnerabilities CVE-2020-15069 ,CVE-2020-15504 ,CVE-2020-17352 are affected in xg_firewall_firmware 17.5-maintenance_release6 NCM
Vulnerabilities CVE-2020-15069 ,CVE-2020-15504 ,CVE-2020-17352 are affected in xg_firewall_firmware 17.5-maintenance_release7 NCM
Vulnerabilities CVE-2020-15069 ,CVE-2020-15504 ,CVE-2020-17352 are affected in xg_firewall_firmware 17.5-maintenance_release8 NCM
Vulnerabilities CVE-2020-15069 ,CVE-2020-15504 ,CVE-2020-17352 are affected in xg_firewall_firmware 17.5-maintenance_release9 NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234