PT-2020-6848 · Sophos · Sophos Sg Utm

Mgrimm · Published 2020-09-25 · Updated 2025-11-07 · CVE-2020-25223

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Sophos SG UTM versions prior to v9.705 MR5 Sophos SG UTM versions prior to v9.607 MR7 Sophos SG UTM versions prior to v9.511 MR11

Description A remote code execution vulnerability exists in the WebAdmin of Sophos SG UTM. The vulnerability is related to the failure to neutralize special elements used in operating system commands. Exploitation of the vulnerability may allow a remote attacker to execute arbitrary commands.

Recommendations For versions prior to v9.705 MR5, update to v9.705 MR5 or later. For versions prior to v9.607 MR7, update to v9.607 MR7 or later. For versions prior to v9.511 MR11, update to v9.511 MR11 or later.

Exploit

Fix

RCE

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

BDU:2023-00988

CVE-2020-25223

Affected Products

Sophos Sg Utm

References · 28

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/sophos_utm_webadmin_sid_cmd_injection.rb · Exploit
• 🔥 https://github.com/darrenmartyn/sophucked · Exploit
• 🔥 https://github.com/twentybel0w/CVE-2020-25223 · Exploit
• 🔥 http://packetstormsecurity.com/files/164697/Sophos-UTM-WebAdmin-SID-Command-Injection.html · Exploit
• 🔥 https://packetstormsecurity.com/files/164697/Sophos-UTM-WebAdmin-SID-Command-Injection.html · Exploit
• 🔥 https://secpod.com/blog/remote-code-execution-in-sophos-utm · Exploit
• https://osv.dev/vulnerability/CVE-2020-25223 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-25223 · Security Note
• https://community.sophos.com/b/security-blog/posts/advisory-resolved-rce-in-sg-utm-webadmin-cve-2020-25223 · Vendor Advisory
• https://community.sophos.com/b/security-blog · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-00988 · Security Note
• https://t.me/cveNotify/142166 · Telegram Post
• https://t.me/defcon_news/88752 · Telegram Post
• https://t.me/true_secator/3877 · Telegram Post
• https://t.me/aptreports/14823 · Telegram Post