CVE-2019-14899 hijacking VPN connections

Hi ThorstenSult 

I have received feedback from the development team.

They have stated that the XG is not affected by this vulnerability as per analysis of this CVE shows that affects route based VPNs.  As the XGs VPN capabilities are only policy based, this should not affect the XG even if the XG acts as a client in the SSL VPN site-to-site configuration.

There will be a KB article written up to reflect this same information.

Thanks!

Hi Community,

Herewith is the KB article that addresses any concerns surrounding this CVE number.

https://www.sophos.com/kb/134996

Thanks!

Thank you for the feedback and for your effort!

Thank you for the feedback and for your effort!