sophos xg firewall firmware

Name: sophos xg firewall firmware
Brand: sophos

productUS

cpe:2.3:o:sophos:xg_firewall_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

public exploit

by severity

2critical5high1medium1low

updated 2026-10-27

vulnerabilities (9)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-15069US	critical9.8OT critical	10.7% (96th)	KEV	17.5	2020-06-29	2 versions
CVE-2020-17352US	high8.8	4.10% (91st)	—	no fix	2020-08-07	2 versions
CVE-2020-15504US	critical9.8	2.12% (82nd)	—	no fix	2020-07-10	3 versions
CVE-2022-3226US	high7.2	1.82% (79th)	—	no fix	2022-12-01	≤ 19.0
CVE-2022-3696US	high7.2	1.20% (68th)	—	no fix	2022-12-01	≤ 19.0
CVE-2022-3709US	high8.4	0.86% (58th)	—	no fix	2022-12-01	≤ 19.0
CVE-2022-3711US	medium4.3	0.75% (55th)	—	no fix	2022-12-01	≤ 19.0
CVE-2022-3710US	low2.7	0.75% (55th)	—	19.5	2022-12-01	< 19.5
CVE-2022-3713US	high8.8	0.72% (54th)	—	no fix	2022-12-01	≤ 19.0

The flaw types (CWEs) most of these CVEs share.

CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')2 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')2 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.