Actively exploited in the wild
CyberoamOS (CROS) SQL Injection Vulnerability
Sophos - CyberoamOS · Listed in the CISA KEV since 2025-02-06. This indicates confirmed attacks in production environments.
Required action: The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.
CVE-2020-29574
CriticalCVSS 9.8KEVExploitation Probability (EPSS)
Very high risk91th percentile - higher than 91% of all known CVEs
Summary
An SQL injection vulnerability in the WebAdmin of Cyberoam OS through 2020-12-04 allows unauthenticated attackers to execute arbitrary SQL statements remotely.
Risk Assessment
An attacker can gain unauthorized access to the database, potentially leading to data leakage or system compromise.
Recommendation
Update Cyberoam OS to the latest version that includes a fix for this vulnerability.
Original NVD description (English source)
An SQL injection vulnerability in the WebAdmin of Cyberoam OS through 2020-12-04 allows unauthenticated attackers to execute arbitrary SQL statements remotely.