CVEブラウザに戻る

CVE-2020-25223

🔥 Known Exploited (CISA KEV)CRITICAL

9.8

CVSS Severity Score

EPSS Score96.6110%

EPSS Percentile94.16th

Published2020-09-25

Last Modified2025-11-07

Data SourcesNVDCISA KEVFIRST.org EPSS

Vulnerability Description

A remote code execution vulnerability exists in the WebAdmin of Sophos SG UTM before v9.705 MR5, v9.607 MR7, and v9.511 MR11

Affected Platforms (CPE)

📦

Sophos

Unified Threat Management

< 9.511>= 9.600 and < 9.607>= 9.700 and < 9.705= 9.511= 9.607= 9.705

References & Advisories

🔗 http://packetstormsecurity.com/files/164697/Sophos-UTM-WebAdmin-SID-Command-Injection.html

🔗 https://community.sophos.com/b/security-blog

🔗 https://community.sophos.com/b/security-blog/posts/advisory-resolved-rce-in-sg-utm-webadmin-cve-2020-25223

🔗 https://cwe.mitre.org/data/definitions/78.html

🔗 https://www.secpod.com/blog/remote-code-execution-in-sophos-utm/

🔗 http://packetstormsecurity.com/files/164697/Sophos-UTM-WebAdmin-SID-Command-Injection.html

🔗 https://community.sophos.com/b/security-blog

🔗 https://community.sophos.com/b/security-blog/posts/advisory-resolved-rce-in-sg-utm-webadmin-cve-2020-25223

関連するセキュリティ記事

ウィークリー・サイバーセキュリティ・ニュース：2026年7月27日

今週の主要セキュリティニュース：Check Point SmartConsole CVE-2026-16232 認証回避の悪用、Qilin ランサムウェアによる PAN-OS 攻撃、ロシア背景 LAUNDRY BEAR による Zimbra 標的型攻撃、および FakeGit リポジトリ脅威の分析。

関連する脆弱性情報

CVE-2026-659756.5

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. In versions 1.88.0 up to but n...

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /betweendates-detailsreports.php.

CVE-2026-84977.4

Improper certificate validation in the Devolutions Server connection handling in Devolutions Password Manager 2026.2.1.0 and earli...

CVE-2026-419399.3

Care Everywhere Gateway 14.3.10 contains a hard-coded credentials vulnerability in the bundled WildFly 8.2.0.Final management inte...