CVE-2020-12271

A SQL injection issue was found in SFOS 17.0, 17.1, 17.5, and 18.0 before 2020-04-25 on Sophos XG Firewall devices, as exploited in the wild in April 2020. This affected devices configured with either the administration (HTTPS) service or the User Portal exposed on the WAN zone. A successful attack may have caused remote code execution that exfiltrated usernames and hashed passwords for the local device admin(s), portal admins, and user accounts used for remote access (but not external Active Directory or LDAP passwords)

• CWE-89
• CWE-89

• https://community.sophos.com/kb/en-us/135412Vendor Advisory
• https://cwe.mitre.org/data/definitions/89.htmlThird Party Advisory
• https://news.sophos.com/en-us/2020/04/26/asnarok/Exploit, Vendor Advisory
• https://community.sophos.com/kb/en-us/135412Vendor Advisory
• https://cwe.mitre.org/data/definitions/89.htmlThird Party Advisory
• https://news.sophos.com/en-us/2020/04/26/asnarok/Exploit, Vendor Advisory
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-12271US Government Resource

Published

Apr 27, 2020

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-12265The decompress package before 4.2.1 for Node.js is vulnerabl…9.8
• CVE-2020-12266An issue was discovered where there are multiple externally …7.5
• CVE-2020-12267setMarkdown in Qt before 5.14.2 has a use-after-free related…9.8
• CVE-2020-12268jbig2_image_compose in jbig2_image.c in Artifex jbig2dec bef…9.8
• CVE-2020-1227<p>A cross-site-scripting (XSS) vulnerability exists when Mi…5.4
• CVE-2020-12270React Native Bluetooth Scan in Bluezone 1.0.0 uses six-chara…6.5
• CVE-2020-12272OpenDMARC through 1.3.2 and 1.4.x allows attacks that inject…5.3
• CVE-2020-12273In TestLink 1.9.20, a crafted login.php viewer parameter exp…7.5
• CVE-2020-12274In TestLink 1.9.20, the lib/cfields/cfieldsExport.php goback…9.8
• CVE-2020-12275GitLab 12.6 through 12.9 is vulnerable to a privilege escala…5.3
• CVE-2020-12276GitLab 9.5.9 through 12.9 is vulnerable to stored XSS in an …4.8
• CVE-2020-12277GitLab 10.8 through 12.9 has a vulnerability that allows som…5.3