Sophos · CyberoamOS

CVE-2020-29574

CyberoamOS (CROS) SQL Injection Vulnerability

Exploited in attacks Used by ransomware Critical 9.8 Attack chance: 4.7%

What it is

An SQL injection vulnerability in the WebAdmin of Cyberoam OS through 2020-12-04 allows unauthenticated attackers to execute arbitrary SQL statements remotely.

CISA: CyberoamOS (CROS) contains a SQL injection vulnerability in the WebAdmin that allows an unauthenticated attacker to execute arbitrary SQL statements remotely.

What to do

The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.

Deadline for US federal agencies: February 27, 2025

Added to the CISA list: February 6, 2025
Published: December 11, 2020
Severity: Critical 9.8 CVSS 3.1
Chance of attacks in the next 30 days (EPSS): 4.7% in the top 8.2% of all known vulnerabilities
Weakness: CWE-89
More details: NVD · CVE.org · CISA

All references (2)

More exploited flaws from Sophos

Added	Vulnerability	Product	Severity	Attack chance
Feb 6, 2025	Buffer OverflowCVE-2020-15069	XG Firewall	Critical 9.8	11%
Nov 16, 2023	Command InjectionCVE-2023-1671	Web Appliance	Critical 9.8	>99.9%
Sep 23, 2022	Code InjectionCVE-2022-3236	Firewall	Critical 9.8	99%
Mar 31, 2022	Authentication BypassCVE-2022-1040	Firewall	Critical 9.8	99.8%
Mar 25, 2022	Remote Code ExecutionCVE-2020-25223	SG UTM	Critical 9.8	97%
Nov 3, 2021	SQL InjectionCVE-2020-12271used by ransomware	SFOS	Critical 10.0	42%

All of them →

Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.