TI-2020-13130 Aliases CVE-2020-17352 GHSA-6fg8-3m77-gwrp

Two OS command injection vulnerabilities in the User Portal of Sophos XG Firewall through…

MEDIUM 45CWE-78Published 2020-08-07 · Updated 2024-08-04

Key facts

Attack vector: Network
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: Code execution
Confidentiality · integrity · availability: High · High · High
Fix status: No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-78.

Summary

Two OS command injection vulnerabilities in the User Portal of Sophos XG Firewall through 2020-08-05 potentially allow an authenticated attacker to remotely execute arbitrary code.

Why it matters now

EPSS 0.04098 90th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 14

CPE	Versions	Role	Vendor
cpe:2.3:o:sophos:xg_firewall_firmware:17.5:-::::::	17.5	Vulnerable	Sophos
cpe:2.3:o:sophos:xg_firewall_firmware:17.5:maintenance_release1::::::	17.5 maintenance_release1	Vulnerable	Sophos
cpe:2.3:o:sophos:xg_firewall_firmware:17.5:maintenance_release10::::::	17.5 maintenance_release10	Vulnerable	Sophos
cpe:2.3:o:sophos:xg_firewall_firmware:17.5:maintenance_release11::::::	17.5 maintenance_release11	Vulnerable	Sophos
cpe:2.3:o:sophos:xg_firewall_firmware:17.5:maintenance_release12::::::	17.5 maintenance_release12	Vulnerable	Sophos
cpe:2.3:o:sophos:xg_firewall_firmware:17.5:maintenance_release3::::::	17.5 maintenance_release3	Vulnerable	Sophos
cpe:2.3:o:sophos:xg_firewall_firmware:17.5:maintenance_release4::::::	17.5 maintenance_release4	Vulnerable	Sophos
cpe:2.3:o:sophos:xg_firewall_firmware:17.5:maintenance_release5::::::	17.5 maintenance_release5	Vulnerable	Sophos
cpe:2.3:o:sophos:xg_firewall_firmware:17.5:maintenance_release6::::::	17.5 maintenance_release6	Vulnerable	Sophos
cpe:2.3:o:sophos:xg_firewall_firmware:17.5:maintenance_release7::::::	17.5 maintenance_release7	Vulnerable	Sophos

cpe:2.3:o:sophos:xg_firewall_firmware:17.5:-:*:*:*:*:*:* Versions 17.5 Vulnerable ·Sophos
cpe:2.3:o:sophos:xg_firewall_firmware:17.5:maintenance_release1:*:*:*:*:*:* Versions 17.5 maintenance_release1 Vulnerable ·Sophos
cpe:2.3:o:sophos:xg_firewall_firmware:17.5:maintenance_release10:*:*:*:*:*:* Versions 17.5 maintenance_release10 Vulnerable ·Sophos
cpe:2.3:o:sophos:xg_firewall_firmware:17.5:maintenance_release11:*:*:*:*:*:* Versions 17.5 maintenance_release11 Vulnerable ·Sophos
cpe:2.3:o:sophos:xg_firewall_firmware:17.5:maintenance_release12:*:*:*:*:*:* Versions 17.5 maintenance_release12 Vulnerable ·Sophos
cpe:2.3:o:sophos:xg_firewall_firmware:17.5:maintenance_release3:*:*:*:*:*:* Versions 17.5 maintenance_release3 Vulnerable ·Sophos
cpe:2.3:o:sophos:xg_firewall_firmware:17.5:maintenance_release4:*:*:*:*:*:* Versions 17.5 maintenance_release4 Vulnerable ·Sophos
cpe:2.3:o:sophos:xg_firewall_firmware:17.5:maintenance_release5:*:*:*:*:*:* Versions 17.5 maintenance_release5 Vulnerable ·Sophos
cpe:2.3:o:sophos:xg_firewall_firmware:17.5:maintenance_release6:*:*:*:*:*:* Versions 17.5 maintenance_release6 Vulnerable ·Sophos
cpe:2.3:o:sophos:xg_firewall_firmware:17.5:maintenance_release7:*:*:*:*:*:* Versions 17.5 maintenance_release7 Vulnerable ·Sophos

Show 4 more CPE

CPE	Versions	Role	Vendor
cpe:2.3:o:sophos:xg_firewall_firmware:17.5:maintenance_release8::::::	17.5 maintenance_release8	Vulnerable	Sophos
cpe:2.3:o:sophos:xg_firewall_firmware:17.5:maintenance_release9::::::	17.5 maintenance_release9	Vulnerable	Sophos
cpe:2.3:o:sophos:xg_firewall_firmware:18.0:-::::::	18.0	Vulnerable	Sophos
cpe:2.3:o:sophos:xg_firewall_firmware:18.0:mr1::::::	18.0 mr1	Vulnerable	Sophos

cpe:2.3:o:sophos:xg_firewall_firmware:17.5:maintenance_release8:*:*:*:*:*:* Versions 17.5 maintenance_release8 Vulnerable ·Sophos
cpe:2.3:o:sophos:xg_firewall_firmware:17.5:maintenance_release9:*:*:*:*:*:* Versions 17.5 maintenance_release9 Vulnerable ·Sophos
cpe:2.3:o:sophos:xg_firewall_firmware:18.0:-:*:*:*:*:*:* Versions 18.0 Vulnerable ·Sophos
cpe:2.3:o:sophos:xg_firewall_firmware:18.0:mr1:*:*:*:*:*:* Versions 18.0 mr1 Vulnerable ·Sophos

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2020-17352
2026-10-03 Alias added: GHSA-6fg8-3m77-gwrp

References

Patch 1

https://community.sophos.com/b/security-blog/posts/advisory-resolved-authenticated-rce-issues-in-user-portal-cve-2020-17352

Advisory 1

https://community.sophos.com/b/security-blog

TI-2020-11847 Sophos XG Firewall 17.x through v17.5 MR12 allows a Buffer Overflow and remote code… KEVCVSS 3.1CRITICAL 9.8
TI-2020-12208 A SQL injection vulnerability in the user and admin web interfaces of Sophos XG Firewall… CVSS 3.1CRITICAL 9.8
TI-2022-03413 Code injection in Sophos Firewall CVSS 3.1HIGH 8.8
TI-2022-03410 Cross-site scripting in Sophos Firewall CVSS 3.1HIGH 8.4
TI-2022-02981 OS command injection in Sophos Firewall CVSS 3.1HIGH 7.2
TI-2022-03397 Code injection in Sophos Firewall CVSS 3.1HIGH 7.2

See all 8 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences