9.2 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
56.8%
Two OS command injection vulnerabilities in the User Portal of Sophos XG Firewall through 2020-08-05 potentially allow an authenticated attacker to remotely execute arbitrary code.
community.sophos.com/b/security-blog
community.sophos.com/b/security-blog/posts/advisory-resolved-authenticated-rce-issues-in-user-portal-cve-2020-17352