CVE-2019-17059

2019-10-1116:45:57

mitre

www.cve.org

9.9 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

79.3%

JSON

A shell injection vulnerability on the Sophos Cyberoam firewall appliance with CyberoamOS before 10.6.6 MR-6 allows remote attackers to execute arbitrary commands via the Web Admin and SSL VPN consoles.

References

community.sophos.com/kb/en-us/134732

community.sophos.com/products/cyberoamos/

thebestvpn.com/cyberoam-preauth-rce/