Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
CVE-2020-29574: CyberoamOS allows remote attacker to run database commands
CVE-2020-29574 · published 5 years ago · actively exploited
Summary
The web administration page in CyberoamOS can be tricked into executing arbitrary database commands without needing a login. This could let an attacker view, change, or delete firewall settings and other sensitive data. Install Sophos’s security update or temporarily disable remote WebAdmin access until it is patched.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| sophos | cyberoamos | <= 2020-12-04 |
Original advisory text
CyberoamOS (CROS) SQL Injection Vulnerability
CyberoamOS (CROS) contains a SQL injection vulnerability in the WebAdmin that allows an unauthenticated attacker to execute arbitrary SQL statements remotely.
References
- https://www.cyberoam.com/ngfw.html Product
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-... US Government Resource
- https://www.bleepingcomputer.com/news/security/sophos-fixes-sql-injection-vulner... Third Party Advisory
Internet-facing
3 days
and check for signs of compromise
Internal
3 days
and check for signs of compromise
- Known to be exploited
- Can be exploited automatically
- Gives an attacker full control
Severity
9.8
Critical
Known exploited
Listed in the CISA KEV catalogue - exploitation confirmed in the wild.
5%
chance of attack within 30 days
Type
CWE-89SQL Injection
Timeline
Published11 Dec 2020
Updated3 Nov 2026
First seen6 Mar 2026
Track software like this
Free during beta