CVE-2020-17352

Two OS command injection vulnerabilities in the User Portal of Sophos XG Firewall through 2020-08-05 potentially allow an authenticated attacker to remotely execute arbitrary code...

CVE-2020-17352

CVE-2020-17352 describes two OS command injection vulnerabilities in the Sophos XG Firewall User Portal (through 2020-08-05). Affected component: User Portal of Sophos XG Firewall. Root cause (per CNVD): input data not properly filtered when constructing OS commands, enabling an authenticated att...

CVE-2020-17352

Two OS command injection vulnerabilities in the User Portal of Sophos XG Firewall through 2020-08-05 potentially allow an authenticated attacker to remotely execute arbitrary code...