---
title: "Sophos: known exploited vulnerabilities"
url: https://erroneo.us/security/vendor/sophos/
description: "Every Sophos vulnerability in CISA's Known Exploited Vulnerabilities catalog since October 2023 (3), newest first, with due dates and fixes."
type: vendor
section: "Security Digest"
date_modified: 2025-02-06
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Sophos: known exploited vulnerabilities

- 2025-02-06 [CVE-2020-29574](https://erroneo.us/security/cve/CVE-2020-29574/index.md) Sophos CyberoamOS: CyberoamOS (CROS) SQL Injection Vulnerability (due 2025-02-27; ransomware: Known)
- 2025-02-06 [CVE-2020-15069](https://erroneo.us/security/cve/CVE-2020-15069/index.md) Sophos XG Firewall: Sophos XG Firewall Buffer Overflow Vulnerability (due 2025-02-27; ransomware: Unknown)
- 2023-11-16 [CVE-2023-1671](https://erroneo.us/security/cve/CVE-2023-1671/index.md) Sophos Web Appliance: Sophos Web Appliance Command Injection Vulnerability (due 2023-12-07; ransomware: Unknown)

---
Source page: https://erroneo.us/security/vendor/sophos/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt