Vulnerabilities > CVE-2020-11503 - Out-of-bounds Write vulnerability in Sophos Sfos 17.0/17.1/17.5

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
sophos
CWE-787

Summary

A heap-based buffer overflow in the awarrensmtp component of Sophos XG Firewall v17.5 MR11 and older potentially allows an attacker to run arbitrary code remotely.

Vulnerable Configurations

Part Description Count
OS
Sophos
27
Hardware
Sophos
1

Common Weakness Enumeration (CWE)