{"cvss":9.8,"datePublished":"2025-02-06","dateUpdated":"2025-02-06","description":"CyberoamOS (CROS) contains a SQL injection vulnerability in the WebAdmin that allows an unauthenticated attacker to execute arbitrary SQL statements remotely.","dueDate":"2025-02-27","id":"CVE-2020-29574","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Known","notes":"https://support.sophos.com/support/s/article/KBA-000007526 ; https://nvd.nist.gov/vuln/detail/CVE-2020-29574","product":"CyberoamOS","requiredAction":"The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.","severity":"CRITICAL","source":"cisa_known_exploited","title":"CyberoamOS (CROS) SQL Injection Vulnerability","vendor":"Sophos"}