A post-auth command injection vulnerability in the exception wizard of Sophos Web Appliance older than version 4.3.10.4 allows administrators to execute arbitrary code.
oryginał ENCVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HSophos Web Appliance
APPSophos< 4.3.10.4
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
RCE
Powiązane podatności
CVE-2023-1671CRITICAL9.8⚠ KEVten sam produkt
A pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance older than vers...
CVE-2017-6182CRITICAL9.8ten sam produkt
In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's interface responsible for generating ...
CVE-2017-6183HIGH7.2ten sam produkt
In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's configuration utilities for adding (a...
CVE-2017-6412HIGH8.1ten sam produkt
In Sophos Web Appliance (SWA) before 4.3.1.2, Session Fixation could occur, aka NSWA-1310.
CVE-2016-9554HIGH7.2ten sam produkt
The Sophos Web Appliance Remote / Secure Web Gateway server (version 4.2.1.3) is vulnerable to a Remote Comman...