CVE-2020-15069

Sophos XG Firewalls were vulnerable to remote code execution via a bookmark feature, actively exploited in the wild.

A buffer overflow in the Sophos XG Firewall's HTTP/S bookmark feature allowed for remote code execution, which was actively exploited. DIB organizations using this firewall were at risk of compromise, potentially impacting CMMC compliance and requiring remediation. Verify firewall versions and apply available patches immediately.

Shame score — The vulnerability's active exploitation and potential for remote code execution demonstrate a significant security oversight by Sophos.