CVE-2020-9363
High
Description
The Sophos AV parsing engine before 2020-01-14 allows virus-detection bypass via a crafted ZIP archive. This affects Endpoint Protection, Cloud Optix, Mobile, Intercept X Endpoint, Intercept X for Server, and Secure Web Gateway. NOTE: the vendor feels that this does not apply to endpoint-protection products because the virus would be detected upon extraction.
SeverityHigh
CVSS7.8
Exploit probability—
Product
Sophos Cloud Optix
PublishedFeb 24, 2020
First seenFeb 24, 2020
How to fix
Update
- sophos cloud_optix2020-01-14 or later
- sophos endpoint_protection2020-01-14 or later
- sophos intercept_x_endpoint2020-01-14 or later
- sophos intercept_x_for_server2020-01-14 or later
- sophos mobile2020-01-14 or later
- sophos secure_web_gateway2020-01-14 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sophos cloud_optix | v < 2020-01-14 | 2020-01-14 |
| sophos endpoint_protection | v < 2020-01-14 | 2020-01-14 |
| sophos intercept_x_endpoint | v < 2020-01-14 | 2020-01-14 |
| sophos intercept_x_for_server | v < 2020-01-14 | 2020-01-14 |
| sophos mobile | v < 2020-01-14 | 2020-01-14 |
| sophos secure_web_gateway | v < 2020-01-14 | 2020-01-14 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.