Security Advisories

Advisory

Impact

CVE

Product Family

Sort by

Items per page

RSS Feed

Critical

Advisory: Log4j zero-day vulnerability AKA Log4Shell (CVE-2021-44228, CVE-2021-45046, CVE-2021-45105, CVE-2021-44832)

CVE(s):

CVE-2021-44228

CVE-2021-45046

CVE-2021-45105

CVE-2021-44832

Updated: 2022 1月 13

Product(s):

Client Authentication Agent

Cloud Optix

Sophos Endpoint

Reflexion

SafeGuard Enterprise (SGN)

Sophos Authenticator

Sophos Central

Sophos Connect Client 2.0

Sophos Email

Sophos Email Appliance (SEA)

Sophos Enterprise Console (SEC)

Sophos Firewall

Sophos Home

Sophos Mobile

Sophos Mobile EAS Proxy

Sophos RED

Sophos SSL VPN client

Sophos Transparent Authentication Suite (STAS)

Sophos UTM

Sophos UTM Manager

Sophos Web Appliance (SWA)

Sophos Wireless

Sophos ZTNA

SophosLabs Intelix

文章版本 27

发布 ID sophos-sa-20211210-log4j-rce

First Published 周五, 12/10/2021 - 13:45

解决方法 No
High

Resolved Post-auth SQLi in SG UTM User Portal (CVE-2021-36807)

CVE(s):

CVE-2021-36807

Updated: 2021 11月 26

Product(s):

Sophos UTM

文章版本 1

发布 ID sophos-sa-20211126-sg-sqli

First Published 周五, 11/26/2021 - 10:07

解决方法 No
Medium

Resolved HMPA Service Local DoS (CVE-2021-25269)

CVE(s):

CVE-2021-25269

Updated: 2021 11月 26

Product(s):

Sophos Endpoint

Sophos Exploit Prevention

文章版本 1

发布 ID sophos-sa-20211126-ixa-hmpa-local-dos

First Published 周五, 11/26/2021 - 08:00

解决方法 No
Medium

Resolved App Password Bypass on Sophos Secure Workspace for Android (CVE-2021-36808)

CVE(s):

CVE-2021-36808

Updated: 2021 10月 29

Product(s):

Sophos Secure Workspace (Android)

文章版本 1

发布 ID sophos-sa-20211029-ssw-pw-bypass

First Published 周五, 10/29/2021 - 17:41

解决方法 No
High

Resolved LPE in HitmanPro.Alert (CVE-2021-25270)

CVE(s):

CVE-2021-25270

Updated: 2021 10月 7

Product(s):

HitmanPro.Alert

文章版本 2

发布 ID sophos-sa-20211007-hmpa-lpe

First Published 周四, 10/07/2021 - 10:23

解决方法 No
High

Resolved LPE in HitmanPro (CVE-2021-25271)

CVE(s):

CVE-2021-25271

Updated: 2021 10月 7

Product(s):

HitmanPro

文章版本 2

发布 ID sophos-sa-20211007-hmp-lpe

First Published 周四, 10/07/2021 - 09:56

解决方法 No
Critical

Resolved RCE in SG UTM WebAdmin (CVE-2020-25223)

CVE(s):

CVE-2020-25223

Updated: 2021 9月 23

Product(s):

Sophos UTM

文章版本 2

发布 ID sophos-sa-20200918-sg-webadmin-rce

First Published 周五, 09/18/2020 - 21:11

解决方法 Yes
Medium

Multiple Vulnerabilities (AKA FragAttacks) in WiFi Specification

CVE(s):

CVE-2020-24586

CVE-2020-24587

CVE-2020-24588

Updated: 2021 5月 12

Product(s):

Sophos Firewall

Sophos UTM

Sophos Wireless

文章版本 1

发布 ID sophos-sa-20210512-fragattacks

First Published 周三, 05/12/2021 - 18:13

解决方法 No
High

Resolved LPE in Endpoint for MacOS (CVE-2021-25264)

CVE(s):

CVE-2021-25264

Updated: 2021 5月 7

Product(s):

Sophos Endpoint

文章版本 1

发布 ID sophos-sa-20210507-ix-macos-lpe

First Published 周五, 05/07/2021 - 18:11

解决方法 No
Critical

Multiple Vulnerabilities (AKA 21Nails) in Exim

CVE(s):

Updated: 2021 5月 4

Product(s):

Sophos Firewall

Sophos UTM

文章版本 1

发布 ID sophos-sa-20210504-exim-21nails

First Published 周二, 05/04/2021 - 17:33

解决方法 Yes
Medium

Resolved RCE in Sophos Connect Client for Windows (CVE-2021-25265)

CVE(s):

CVE-2021-25265

Updated: 2021 3月 1

Product(s):

Sophos Connect Client 2.0

文章版本 1

发布 ID sophos-sa-20210301-connect-client-rce

First Published 周一, 03/01/2021 - 19:18

解决方法 No
Medium

Multiple Dnsmasq Vulnerabilities (AKA DNSpooq) in Sophos RED

CVE(s):

CVE-2020-25684

CVE-2020-25685

CVE-2020-25686

Updated: 2021 1月 19

Product(s):

Sophos RED

文章版本 1

发布 ID sophos-sa-20210119-red-dnspooq

First Published 周二, 01/19/2021 - 20:12

解决方法 No
Critical

Resolved SQLi in Cyberoam OS WebAdmin (CVE-2020-29574)

CVE(s):

CVE-2020-29574

Updated: 2020 12月 10

Product(s):

Cyberoam OS Devices

文章版本 1

发布 ID sophos-sa-20201210-cyberoam-webadmin-sqli

First Published 周四, 12/10/2020 - 20:50

解决方法 No
Informational

NAT Slipstreaming

CVE(s):

Updated: 2020 12月 7

Product(s):

Cyberoam OS Devices

Sophos Firewall

Sophos UTM

文章版本 1

发布 ID sophos-sa-20201207-nat-slipstreaming

First Published 周一, 12/07/2020 - 16:22

解决方法 No
High

Resolved authenticated RCE issues in User Portal (CVE-2020-17352)

CVE(s):

CVE-2020-17352

Updated: 2020 8月 7

Product(s):

Sophos Firewall

文章版本 1

发布 ID sophos-sa-20200807-xg-user-portal-post-auth-rce

First Published 周五, 08/07/2020 - 21:57

解决方法 No
Critical

Resolved RCE via SQLi (CVE-2020-15504)

CVE(s):

CVE-2020-15504

Updated: 2020 7月 10

Product(s):

Sophos Firewall

文章版本 1

发布 ID sophos-sa-20200710-xg-sqli-rce

First Published 周五, 07/10/2020 - 22:01

解决方法 No
Critical

Resolved buffer overflow in XG Firewall v17.x User Portal (CVE-2020-15069)

CVE(s):

CVE-2020-15069

Updated: 2020 6月 25

Product(s):

Sophos Firewall

文章版本 1

发布 ID sophos-sa-20200625-xg-user-portal-rce

First Published 周四, 06/25/2020 - 22:05

解决方法 No
Critical

Resolved RCE through heap overflow in awarrensmtp (CVE-2020-11503)

CVE(s):

CVE-2020-11503

Updated: 2020 6月 17

Product(s):

Sophos Firewall

文章版本 1

发布 ID sophos-sa-20200617-xg-awarrensmtp-rce

First Published 周三, 06/17/2020 - 22:18

解决方法 No
High

Sophos Anti-Virus for macOS privilege escalation (CVE-2020-10947)

CVE(s):

CVE-2020-10947

Updated: 2020 4月 16

Product(s):

Sophos Endpoint

文章版本 1

发布 ID sophos-sa-20200416-sav-macos-lpe

First Published 周四, 04/16/2020 - 22:22

解决方法 No
Informational

Sophos Comments to CVE-2020-9363

CVE(s):

CVE-2020-9363

Updated: 2020 3月 12

Product(s):

Sophos UTM

文章版本 1

发布 ID sophos-sa-20200312-cve-2020-9363

First Published 周四, 03/12/2020 - 21:26

解决方法 No