coldbraid

CVE-2020-29574 Sophos CyberoamOS

CyberoamOS (CROS) contains a SQL injection vulnerability in the WebAdmin that allows an unauthenticated attacker to execute arbitrary SQL statements remotely.

CVSS
not scored

CWE-89

On CISA’s exploited list

CyberoamOS (CROS) SQL Injection Vulnerability

Added
2025-02-06
Federal patch deadline
2025-02-27
Ransomware use
known