CVE-2020-12271 Sophos SFOS
Sophos Firewall operating system (SFOS) firmware contains a SQL injection vulnerability when configured with either the administration (HTTPS) service or the User Portal is exposed on the WAN zone. Successful exploitation may cause remote code execution to exfiltrate usernames and hashed passwords for the local…
- CVSS
- not scored
On CISA’s exploited list
Sophos SFOS SQL Injection Vulnerability
- Added
- 2021-11-03
- Federal patch deadline
- 2022-05-03
- Ransomware use
- known