PT-2020-14161 · Sophos · Sophos Firewall

Published 2020-06-29 · Updated 2025-02-08 · CVE-2020-15069

Positive Technologies · (AI Summary)

CVSS v3.1

9.8

Critical

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Sophos XG Firewall versions 17.x through v17.5 MR12

Description The issue is related to a buffer overflow flaw in the HTTP/S Bookmarks feature for clientless access, allowing remote code execution. A hotfix, HF062020.1, has been published for all firewalls running v17.x. This flaw could allow unauthorized access via the user portal on WAN.

Recommendations For Sophos XG Firewall versions 17.x through v17.5 MR12, apply the hotfix HF062020.1 to resolve the issue. As a temporary workaround, consider disabling the HTTP/S Bookmarks feature for clientless access until the hotfix is applied.

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2020-15069

Affected Products

Sophos Firewall

References · 12

• https://osv.dev/vulnerability/CVE-2020-15069 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-15069 · Security Note
• https://twitter.com/rst_cloud/status/1853166113913250173 · Twitter Post
• https://t.me/cvenotify/4720 · Telegram Post
• https://twitter.com/ScyScan/status/1887939679271694460 · Twitter Post
• https://twitter.com/TMJIntel/status/1887567239953457238 · Twitter Post
• https://t.me/aptreports/13826 · Telegram Post
• https://twitter.com/HammoheadNet/status/1868308072642560030 · Twitter Post
• https://twitter.com/dCypherIO/status/1888027219429056910 · Twitter Post
• https://t.me/cvenotify/110264 · Telegram Post
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-15069 · Note
• https://community.sophos.com/b/security-blog/posts/advisory-buffer-overflow-vulnerability-in-user-portal · Security Note, Vendor Advisory