CVEvulnerability

CVE-2020-11503

9.8 CRITICAL Published 2020-06-18 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2020-06-18
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 ([email protected]): 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected]): 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses: CWE-787

Description

A heap-based buffer overflow in the awarrensmtp component of Sophos XG Firewall v17.5 MR11 and older potentially allows an attacker to run arbitrary code remotely.

Affected configurations

• sophos sfos (< 17.5) • sophos sfos 17.5

Weakness · CWE (1)

CWE-787 Out-of-bounds Write weakness

References

https://community.sophos.com/b/security-blog/posts/advisory-potential-rce-through-heap-overflow-in-awarrensmtp-cve-2020-11503 Vendor Advisory
https://community.sophos.com/b/security-blog/posts/advisory-potential-rce-through-heap-overflow-in-awarrensmtp-cve-2020-11503 Vendor Advisory

CVE-2020-11503

Description

Affected configurations

Related

Weakness · CWE (1)

References