Sophos XG Firewall 17.x through v17.5 MR12 allows a Buffer Overflow and remote code execution via the HTTP/S Bookmarks feature for clientless access. Hotfix HF062020.1 was published for all firewalls running v17.x.
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Wed, 16 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.63218}

epss

{'score': 0.62063}


Mon, 10 Feb 2025 18:15:00 +0000

Type Values Removed Values Added
Metrics kev

{'dateAdded': '2025-02-06'}


Thu, 06 Feb 2025 18:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'active', 'Technical Impact': 'total'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2025-07-30T01:45:40.031Z

Reserved: 2020-06-25T00:00:00.000Z

Link: CVE-2020-15069

cve-icon Vulnrichment

Updated: 2024-08-04T13:08:21.880Z

cve-icon NVD

Status : Analyzed

Published: 2020-06-29T18:15:12.313

Modified: 2025-04-03T20:05:52.630

Link: CVE-2020-15069

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.