Sophos Unified Threat Management vulnerabilities

6 CVEs affecting Sophos Unified Threat Management, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-0652, published 2022-03-22.

More from Sophos.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-25223: Sophos SG UTM Remote Code Execution Vulnerability, published 2020-09-25. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2022-03-25. EPSS: 96.8% chance of exploitation in the next 30 days. A remote code execution vulnerability exists in the WebAdmin of Sophos SG UTM before v9.705 MR5, v9.607 MR7, and v9.511 MR11
• CVE-2012-3238, published 2012-07-09. Medium severity, CVSS 4.3. EPSS: 3.5% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the Backup/Restore component in WebAdmin in Astaro Security Gateway before 8.305 allows remote attackers to inject arbitrary web script or HTML via the…
• CVE-2014-2537, published 2014-03-18. High severity, CVSS 7.8. EPSS: 3.1% chance of exploitation in the next 30 days. Memory leak in the TCP stack in the kernel in Sophos UTM before 9.109 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors.
• CVE-2022-0386, published 2022-03-22. High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days. A post-auth SQL injection vulnerability in the Mail Manager potentially allows an authenticated attacker to execute code in Sophos UTM before version 9.710.
• CVE-2021-25273, published 2021-07-29. Medium severity, CVSS 4.8. EPSS: 0.8% chance of exploitation in the next 30 days. Stored XSS can execute as administrator in quarantined email detail view in Sophos UTM before version 9.706.
• CVE-2022-0652, published 2022-03-22. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Confd log files contain local users', including root’s, SHA512crypt password hashes with insecure access permissions. This allows a local attacker to attempt off-line brute-force attacks against…