Sophos Cyberoamos vulnerabilities

2 vulnerabilities

Known vulnerabilities in Sophos Cyberoamos, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CVE-2020-29574sophoscyberoamosKEVRansomware
EPSS score
4.70%
An SQL injection vulnerability in the WebAdmin of Cyberoam OS through 2020-12-04 allows unauthenticated attackers to execute arbitrary SQL statements remotely.10CVE-2019-17059sophoscyberoamos
EPSS score
7.41%
A shell injection vulnerability on the Sophos Cyberoam firewall appliance with CyberoamOS before 10.6.6 MR-6 allows remote attackers to execute arbitrary commands via the Web Admin and SSL VPN consoles.