漏洞描述
Sophos SG UTMA WebAdmin is susceptible to a remote code execution vulnerability in versions before v9.705 MR5, v9.607 MR7, and v9.511 MR11.
影响产品
修复建议
建议关注厂商安全公告,及时升级至已修复版本,并结合实际资产暴露情况采取缓解措施。
参考链接
www.atredis.comhttps://www.atredis.com/blog/2021/8/18/sophos-utm-cve-2020-25223↗community.sophos.comhttps://community.sophos.com/b/security-blog/posts/advisory-resolved-rce-in-sg-utm-webadmin-cve-2020-25223↗nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2020-25223↗community.sophos.comhttps://community.sophos.com/b/security-blog↗cwe.mitre.orghttps://cwe.mitre.org/data/definitions/78.html↗