high8.8
CVE-2020-17352
Two OS command injection vulnerabilities in the User Portal of Sophos XG Firewall through 2020-08-05 potentially allow an authenticated attacker to remotely ex…
Impact
Two OS command injection vulnerabilities in the User Portal of Sophos XG Firewall through 2020-08-05 potentially allow an authenticated attacker to remotely execute arbitrary code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sophos | Xg Firewall Firmware | Versions 17.5, 18.0 |