CVE-2020-25223 PoC — Sophos SG UTM 操作系统命令注入漏洞

Source

https://github.com/twentybel0w/CVE-2020-25223

Associated Vulnerability

Title:Sophos SG UTM 操作系统命令注入漏洞 (CVE-2020-25223)
Description:A remote code execution vulnerability exists in the WebAdmin of Sophos SG UTM before v9.705 MR5, v9.607 MR7, and v9.511 MR11

Readme

# CVE-2020-25223

A PoC script for testing CVE-2020-25223 against an affected Sophos UTM. 
Given an IP address, the script attempts to download a copy of the devices /etc/shadow file.
Original research: https://www.atredis.com/blog/2021/8/18/sophos-utm-cve-2020-25223

File Snapshot

Log in to view the POC file snapshot cached by Shenlong Bot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →