SQL injection in Cyberoam OS - CVE-2020-29574
Published: December 11, 2020 / Updated: February 7, 2025
Vulnerability identifier: #VU48933
CSH Severity: High
CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-29574
CWE-ID: CWE-89
Exploitation vector: Remote access
Exploit availability:
The vulnerability is being exploited in the wild
Vulnerability details
The vulnerability allows a remote attacker to execute arbitrary SQL queries in database.
The vulnerability exists due to insufficient sanitization of user-supplied data with the administrative interface (HTTP admin service) of the Cyberoam operating system (CROS) devices. A remote non-authenticated attacker can send a specially crafted request to the affected application and execute arbitrary SQL commands within the application database.
Successful exploitation of this vulnerability may allow a remote attacker to read, delete, modify data in database and gain complete control over the affected device.
Affected software
Cyberoam OS
How to mitigate CVE-2020-29574
Install updates from vendor's website.
Cyberoam OS - addressed in versions 10.6.4 GA Hotfix 19, 10.6.4 MR1 Hotfix 20, 10.6.5 GA Hotfix 18, 10.6.5 MR1 Hotfix 17, 10.6.6 GA Hotfix 19, 10.6.6 MR1 Hotfix 16, 10.6.6 MR2 Hotfix 16, 10.6.6 MR3 Hotfix 16, 10.6.6 MR4 Hotfix 13, 10.6.6 MR5 Hotfix 12, 10.6.6 MR6 Hotfix 3