CVE Watch—

CVE-2020-12271

Sophos SFOS SQL Injection Vulnerability

CVSS

—

No CVSS

EPSS

42.2%

p99

KEV

YES

Nov 3, 2021

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

42.2%EPSS · 30 days43.1%

2026-06-302026-07-16

KEV catalog record

Product

Sophos / SFOS

Vulnerability

Sophos SFOS SQL Injection Vulnerability

Added to KEV

Nov 3, 2021

Remediate by

May 3, 2022

Known ransomware use

Yes

Summary description

Sophos Firewall operating system (SFOS) firmware contains a SQL injection vulnerability when configured with either the administration (HTTPS) service or the User Portal is exposed on the WAN zone. Successful exploitation may cause remote code execution to exfiltrate usernames and hashed passwords for the local device admin(s), portal admins, and user accounts used for remote access (but not external Active Directory or LDAP passwords).

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2020-12271

Related CVEs

No related CVEs by CWE or product.