Educational use only
This wiki page is intended for educational purposes only. The information provided within this content is meant to enhance understanding, knowledge, and skills related to the subjects discussed. It is not intended to be used for any commercial, industrial, or professional application without appropriate consultation and verification from relevant experts or authorities.
The content presented herein should be utilised responsibly and ethically in accordance with educational guidelines, institutions, or programs. Any action taken based on the information found in this wiki should be done with a critical and discerning mindset, considering the specific context and guidelines of educational institutions.
In no way does this information replace professional advice, guidance, or expertise. Individuals using this information are encouraged to seek qualified professionals or experts for tailored guidance related to their specific needs, projects, or applications.
The creators and contributors of this wiki disclaim any liability for any misuse, misinterpretation, or consequences arising from the use of the information beyond its intended educational scope.
CVE Details:
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12271
- https://www.rapid7.com/blog/post/2020/04/27/cve-2020-12271-sophos-xg-firewall-pre-auth-sql-injection-vulnerability-remediation-guidance-and-exposure-overview/
Affected Versions
SFOS 17.0, 17.1, 17.5, and 18.0
What Does it Do?
Pre-Authentication SQL Injection
- can allow exfiltration of XG firewall-resident data, which can contain local user credentials
Exploit
Known to be exploited in the wild, but no PoC has been released
References
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12271
- https://www.rapid7.com/blog/post/2020/04/27/cve-2020-12271-sophos-xg-firewall-pre-auth-sql-injection-vulnerability-remediation-guidance-and-exposure-overview/
- https://www.tenable.com/blog/cve-2020-12271-zero-day-sql-injection-vulnerability-in-sophos-xg-firewall-exploited-in-the-wild