CVE-2020-15069

Timeline

Detection, updates, and resolution for this record.

1. Jun 29, 2020 · Catalog

   Detected

   Sophos XG Firewall 17.x through v17.5 MR12 allows a Buffer Overflow and remote code execution via the HTTP/S Bookmarks feature for clientless access. Hotfix HF062020.1 was published for all firewalls running v17.x.

2. Feb 6, 2025 · CISA KEV

   Known exploited

   Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

3. Feb 27, 2025 · CISA KEV

   Remediation due

   Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

4. Jun 16, 2026 · Catalog

   Updated

   Sophos XG Firewall 17.x through v17.5 MR12 allows a Buffer Overflow and remote code execution via the HTTP/S Bookmarks feature for clientless access. Hotfix HF062020.1 was published for all firewalls running v17.x.

Affected

• cpe sophos/xg firewall firmwareversion unspecified
• cpe sophos/xg firewall firmware17.5
• vendor Sophos XG Firewallversion unspecified

Sources

• CISA KEVCVE-2020-15069

  Sophos XG Firewall contains a buffer overflow vulnerability that allows for remote code execution via the "HTTP/S bookmark" feature.

  cisa.gov
• CVE.orgCVE-2020-15069

  Official CVE identifier

  cve.org
• FIRST EPSSCVE-2020-15069

  30-day exploitation probability 10.7%

  first.org
• NIST NVDCVE-2020-15069

  Sophos XG Firewall 17.x through v17.5 MR12 allows a Buffer Overflow and remote code execution via the HTTP/S Bookmarks feature for clientless access. Hotfix HF062020.1 was published for all firewalls running v17.x.

  nvd.nist.gov

References

• CISA note · community.sophos.com
• CISA note · nvd.nist.gov
• US Government Resource · cisa.gov