CVE-2020-15069VulnerabilityPublished 02/06/2025Updated 10/24/2026
CVE-2020-15069: Sophos XG Firewall Buffer Overflow Vulnerability
Affects Sophos XG FirewallSource CISA KEV
Severity
HighNo CVSS score published yet
- Exploitation
Actively exploited – in CISA KEV since 02/06/2025
- KEV deadline
- 02/27/2025
- EPSS
- 10.7% chance of exploitation in 30 days – higher than 95% of CVEs
What to do
CISA required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Description
Sophos XG Firewall contains a buffer overflow vulnerability that allows for remote code execution via the "HTTP/S bookmark" feature.