Asnarok EXPLOITS SQL injection
Asnarok exploited a SQL injection vulnerability in the Sophos XG Firewall web interface.
Explicit Confidence 99% · Jack Rhysider EP 174 Details
“the web UI of this firewall had a SQL injection vulnerability in it”
Exploit
exploit:asnarok
Name used for the initial Sophos XG Firewall attack involving a SQL injection vulnerability and malicious update redirection.
Name used for the initial Sophos XG Firewall attack involving a SQL injection vulnerability and malicious update redirection.
“We called it Asnarok”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | EXPLOITS | SQL injection | Explicit | 174 |
| outgoing | AFFECTS | Sophos XG Firewall | Explicit | 174 |
| incoming | INVOLVES | Asnarok | Explicit | 174 |
Asnarok EXPLOITS SQL injection
Asnarok exploited a SQL injection vulnerability in the Sophos XG Firewall web interface.
Explicit Confidence 99% · Jack Rhysider EP 174 Details
“the web UI of this firewall had a SQL injection vulnerability in it”
Asnarok AFFECTS Sophos XG Firewall
The Asnarok exploit affected the Sophos XG Firewall.
Explicit Confidence 96% · Andrew Brandt EP 174 Details
“Sophos has a firewall called the XG Firewall”
The incident was named Asnarok by the Sophos team.
Explicit Confidence 99% · Craig Jones EP 174 Details
“We called it Asnarok”