unified threat management vulnerabilities and fixes

Recent CVEs affecting unified threat management, with upgrade or downgrade steps. 6 tracked.

Also searched as: unifiedthreatmanagement.

unified threat management has 6 tracked vulnerabilities, 1 critical and 1 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 6. Most recent: 2023-04-12. Highest priority: CVE-2020-25223 (score 97/100).

• CVE-2023-22897 MEDIUM 6.5 UPGRADE An issue was discovered in SecurePoint UTM before 12.2.5.1
• CVE-2023-22620 HIGH 7.5 UPGRADE An issue was discovered in SecurePoint UTM before 12.2.5.1
• CVE-2022-0652 LOW 3.3 UPGRADE Confd log files contain local users', including root’s, SHA512crypt password hashes with insecure access permi
• CVE-2022-0386 HIGH 8.8 UPGRADE A post-auth SQL injection vulnerability in the Mail Manager potentially allows an authenticated attacker to ex
• CVE-2021-25273 MEDIUM 4.8 UPGRADE Stored XSS can execute as administrator in quarantined email detail view in Sophos UTM before version 9.706.
• CVE-2020-25223 CRITICAL 9.8 EXPLOITED UPGRADE Sophos SG UTM Remote Code Execution Vulnerability

FAQ

How do I fix unified threat management vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is unified threat management being exploited right now?

Yes: 1 unified threat management CVE is on the CISA Known Exploited Vulnerabilities list, so patch it first.

Which unified threat management CVE should I patch first?

CVE-2020-25223 currently ranks highest (97/100): Sophos SG UTM Remote Code Execution Vulnerability.

RSS feed for unified threat management · ← Back to latest CVEs