Details Disclosed for Critical Vulnerability in Sophos Appliances

guest · Aug 23, 2021

Details Disclosed for Critical Vulnerability in Sophos Appliances
August 23, 2021
https://www.securityweek.com/details-disclosed-critical-vulnerability-sophos-appliances

Sophos informed customers in September 2020 that it had patched a remote code execution flaw affecting the web administration console (WebAdmin) of SG UTM devices. The issue, tracked as CVE-2020-25223, was reported to the cybersecurity firm by an external researcher, and it was fixed with the release of SG UTM v9.705 MR5, v9.607 MR7, and v9.511 MR11.

During a recent client engagement, Justin Kennedy, research consulting director at information security consultancy Atredis Partners, noticed that the customer’s UTM devices had been running a vulnerable version of the software.
Kennedy compared the differences between the patched and unpatched versions of the software, which enabled him to identify the root cause of the vulnerability.
Click to expand...

Last week, the researcher published a blog post detailing how CVE-2020-25223 can be exploited by a remote, unauthenticated attacker for arbitrary code execution with root privileges on a Sophos appliance.

He has advised organizations to check if they are still affected by this vulnerability, and if they are, to patch their systems and then review their patching policies to identify the gaps that allowed a critical vulnerability to remain unpatched for nearly a year.
Click to expand...

Log in or Sign up

Details Disclosed for Critical Vulnerability in Sophos Appliances

guest Guest

Log in or Sign up

Details Disclosed for Critical Vulnerability in Sophos Appliances

guest Guest

Useful Searches