Hillstone Networks

'; } else{ echo ''; } echo 'Hillstone Networks'; } elseif ($_SERVER[HTTP_HOST] == "update1.huaantech.com.cn") { echo ''; echo 'huaantech'; } elseif ($_SERVER[HTTP_HOST] == "update1.dcnetworks.com.cn") { echo ''; echo 'dcnetworks'; } elseif ($_SERVER[HTTP_HOST] == "update1.w-ibeda.com") { if (false===strpos($_SERVER[REQUEST_URI],"/en/")) echo ''; else echo ''; echo 'w-ibeda'; } elseif ($_SERVER[HTTP_HOST] == "update1.hp-telecom.com") { echo ''; echo 'hp-telecom'; } elseif ($_SERVER[HTTP_HOST] == "update1.maipu.com") { echo ''; echo 'Maipu'; } elseif ($_SERVER[HTTP_HOST] == "update1.ncurity.com") { echo ''; echo 'Ncurity'; } elseif ($_SERVER[HTTP_HOST] == "update1.socusnetwork.com") { echo ''; echo 'Socusnetwork'; } else{ echo ''; echo 'Hillstone Networks'; } ?>

vul_app: sophos_utm_webadmin_sid_cmd_injection_vul（Rule ID：1070210186）

Release Date：2025/9/15

Rule Name：CVE-2020-25223: Sophos UTM WebAdmin SID Command Injection Vulnerability

Severity：critical

CVE ID：CVE-2020-25223

Descripiton：

Sophos SG UTM is a security gateway in Sophos, England. This product is used to protect the computer nodes in the domain network. Sophos SG UTM Webadmin has security vulnerabilities, and attackers can use the vulnerability remote execution code, the following products and versions are affected: V9.705 MR5, V9.607 MR7 version, V9.511 MR11 version. This rule supports to defend the A6: Vulnerable and Outdated Components of OWASP Top 10 - 2021.
Other reference：None

Solution：

Update vendor patches.