CVE:CVE-2020-11503
CNNVD:CNNVD-202006-1237
Sophos XG Firewall是英国Sophos公司的一款下一代端点保护与企业级防火墙产品。
Sophos XG Firewall 17.5 MR11及之前版本中的awarrensmtp组件存在缓冲区错误漏洞。远程攻击者可利用该漏洞执行任意代码。
solution:Upgrade sophos sfos to a higher version than 17.5,17.5,17.5:maintenance_release1,17.5:maintenance_release10,17.5:maintenance_release11,17.5:maintenance_release2,17.5:maintenance_release3,17.5:maintenance_release4,17.5:maintenance_release5,17.5:maintenance_release6,17.5:maintenance_release7,17.5:maintenance_release8,17.5:maintenance_release9,and avoid the version (,17.5),17.5,17.5:maintenance_release1,17.5:maintenance_release10,17.5:maintenance_release11,17.5:maintenance_release2,17.5:maintenance_release3,17.5:maintenance_release4,17.5:maintenance_release5,17.5:maintenance_release6,17.5:maintenance_release7,17.5:maintenance_release8,17.5:maintenance_release9