- Vendor / Project
- Sophos
- Product
- CyberoamOS
- Date added
- Feb 6, 2025
- Due date
- Feb 27, 2025
- Known ransomware use
- Known
- CWEs
- CWE-89
Description
CyberoamOS (CROS) contains a SQL injection vulnerability in the WebAdmin that allows an unauthenticated attacker to execute arbitrary SQL statements remotely.
Required action
The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.