Sophos SG UTM Remote Code Execution Vulnerability

概要

参考情報

• packetstormsecurity.com/files/164697/Sophos-UTM-WebAdmin-SID-Command-Injection.html · Exploit
• community.sophos.com/b/security-blog · Not Applicable
• community.sophos.com/b/security-blog/posts/advisory-resolved-rce-in-sg-utm-webadmin-cve-2020-25223 · Vendor Advisory
• cwe.mitre.org/data/definitions/78.html · Technical Description
• secpod.com/blog/remote-code-execution-in-sophos-utm · Exploit
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2020-25223

unified threat management のその他の脆弱性

• CVE-2022-0652高 7.8Confd log files contain local users', including root’s, SHA512crypt password hashes with insecure access permissions. This allows a local at…
• CVE-2022-0386高 8.8A post-auth SQL injection vulnerability in the Mail Manager potentially allows an authenticated attacker to execute code in Sophos UTM befor…
• CVE-2021-25273中 4.8Stored XSS can execute as administrator in quarantined email detail view in Sophos UTM before version 9.706.