返回 CVE 瀏覽器

CVE-2020-25223

🔥 Known Exploited (CISA KEV)CRITICAL

9.8

CVSS Severity Score

EPSS Score96.6110%

EPSS Percentile94.16th

Published2020-09-25

Last Modified2025-11-07

Data SourcesNVDCISA KEVFIRST.org EPSS

Vulnerability Description

A remote code execution vulnerability exists in the WebAdmin of Sophos SG UTM before v9.705 MR5, v9.607 MR7, and v9.511 MR11

Affected Platforms (CPE)

📦

Sophos

Unified Threat Management

< 9.511>= 9.600 and < 9.607>= 9.700 and < 9.705= 9.511= 9.607= 9.705

References & Advisories

🔗 http://packetstormsecurity.com/files/164697/Sophos-UTM-WebAdmin-SID-Command-Injection.html

🔗 https://community.sophos.com/b/security-blog

🔗 https://community.sophos.com/b/security-blog/posts/advisory-resolved-rce-in-sg-utm-webadmin-cve-2020-25223

🔗 https://cwe.mitre.org/data/definitions/78.html

🔗 https://www.secpod.com/blog/remote-code-execution-in-sophos-utm/

🔗 http://packetstormsecurity.com/files/164697/Sophos-UTM-WebAdmin-SID-Command-Injection.html

🔗 https://community.sophos.com/b/security-blog

🔗 https://community.sophos.com/b/security-blog/posts/advisory-resolved-rce-in-sg-utm-webadmin-cve-2020-25223

相關資安分析文章

週度網絡安全新聞：2026 年 7 月 27 日

本週重大安全週報聚焦於 Check Point SmartConsole CVE-2026-16232 驗證繞過之在野利用、PAN-OS GlobalProtect 漏洞與 Qilin 勒索軟體侵襲、俄羅斯 LAUNDRY BEAR 對 Zimbra 進行之國家級郵件間諜活動，以及 Windchill 與 FakeGit 惡意 Repositories 威脅趨勢。

相關漏洞威脅

CVE-2026-659756.5

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. In versions 1.88.0 up to but n...

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /betweendates-detailsreports.php.

CVE-2026-84977.4

Improper certificate validation in the Devolutions Server connection handling in Devolutions Password Manager 2026.2.1.0 and earli...

CVE-2026-419399.3

Care Everywhere Gateway 14.3.10 contains a hard-coded credentials vulnerability in the bundled WildFly 8.2.0.Final management inte...