Date：2022/10/24

【Security Vulnerability Warning】 The Sophos XG Firewall operating system exists a security vulnerability (CVE-2020-15504), please confirm and update as soon as possible

Subject: The Sophos XG Firewall operating system exists a security vulnerability (CVE-2020-15504) that allows attackers to remotely execute arbitrary code, please confirm and update as soon as possible!

Description:
For details, please refer to the following links.

https://community.sophos.com/b/security-blog/posts/advisory-resolved-rce-via-sqli-cve-2020-15504

https://www.sophos.com/en-us/security-advisories/sophos-sa-20200710-xg-sqli-rce

https://nvd.nist.gov/vuln/detail/CVE-2020-15504

https://www.tenable.com/cve/CVE-2020-15504

Network System Division
Computer and Communication Center