CVE-2020-17352

Description

Two OS command injection vulnerabilities in the User Portal of Sophos XG Firewall through 2020-08-05 potentially allow an authenticated attacker to remotely execute arbitrary code.

Risk Information

Base Score

8.8

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

2.228

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2020-15069 ,CVE-2020-15504 ,CVE-2020-17352 are affected in xg_firewall_firmware 17.5	NCM
Vulnerabilities CVE-2020-15069 ,CVE-2020-15504 ,CVE-2020-17352 are affected in xg_firewall_firmware 17.5-maintenance_release1	NCM
Vulnerabilities CVE-2020-15069 ,CVE-2020-15504 ,CVE-2020-17352 are affected in xg_firewall_firmware 17.5-maintenance_release10	NCM
Vulnerabilities CVE-2020-15069 ,CVE-2020-15504 ,CVE-2020-17352 are affected in xg_firewall_firmware 17.5-maintenance_release11	NCM
Vulnerabilities CVE-2020-15069 ,CVE-2020-15504 ,CVE-2020-17352 are affected in xg_firewall_firmware 17.5-maintenance_release12	NCM
Vulnerabilities CVE-2020-15069 ,CVE-2020-15504 ,CVE-2020-17352 are affected in xg_firewall_firmware 17.5-maintenance_release3	NCM
Vulnerabilities CVE-2020-15069 ,CVE-2020-15504 ,CVE-2020-17352 are affected in xg_firewall_firmware 17.5-maintenance_release4	NCM
Vulnerabilities CVE-2020-15069 ,CVE-2020-15504 ,CVE-2020-17352 are affected in xg_firewall_firmware 17.5-maintenance_release5	NCM
Vulnerabilities CVE-2020-15069 ,CVE-2020-15504 ,CVE-2020-17352 are affected in xg_firewall_firmware 17.5-maintenance_release6	NCM
Vulnerabilities CVE-2020-15069 ,CVE-2020-15504 ,CVE-2020-17352 are affected in xg_firewall_firmware 17.5-maintenance_release7	NCM
Vulnerabilities CVE-2020-15069 ,CVE-2020-15504 ,CVE-2020-17352 are affected in xg_firewall_firmware 17.5-maintenance_release8	NCM
Vulnerabilities CVE-2020-15069 ,CVE-2020-15504 ,CVE-2020-17352 are affected in xg_firewall_firmware 17.5-maintenance_release9	NCM
Vulnerabilities CVE-2020-15504 ,CVE-2020-17352 are affected in xg_firewall_firmware 18.0	NCM
Vulnerabilities CVE-2020-17352 are affected in xg_firewall_firmware 18.0-mr1	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234