.. / CVE-2020-25223

• RCE
• Nuclei
• Web

Exploit for Sophos UTM Preauth - Remote Code Execution (CVE-2020-25223)

Description:

Sophos SG UTMA WebAdmin is susceptible to a remote code execution vulnerability in versions before v9.705 MR5, v9.607 MR7, and v9.511 MR11.

Nuclei Template

View the template here CVE-2020-25223.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2020/CVE-2020-25223.yaml

References: