CyberoamOS (CROS) SQL Injection Vulnerability (CVE-2020-29574)
Severity: critical · Patch status: unpatched · Since 2025-02-06 · CVE-2020-29574
CyberoamOS (CROS) contains a SQL injection vulnerability in the WebAdmin that allows an unauthenticated attacker to execute arbitrary SQL statements remotely. CISA added CVE-2020-29574 to its Known Exploited Vulnerabilities catalog on Feb 6, 2025, which means attackers are exploiting it in the wild. CISA reports known use in ransomware campaigns.
What to do
- The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.
- US federal agencies must remediate by Feb 27, 2025 (BOD 22-01); treat that as the outer limit.
Sources
All live incidents on Threat Watch