Lucene search

K
nessusThis script is Copyright (C) 2023-2024 and is owned by Tenable, Inc. or an Affiliate thereof.SOPHOS_WEB_APPLIANCE_CVE-2023-1671.NBIN
HistoryMay 18, 2023 - 12:00 a.m.

Sophos Web Appliance Pre-Authentication Command Injection (CVE-2023-1671)

2023-05-1800:00:00
This script is Copyright (C) 2023-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
15
sophos web appliance
command injection
cve-2023-1671
scanner
binary data

0.969 High

EPSS

Percentile

99.7%

The remote Sophos Web Appliance is affected by a pre-authentication command injection vulnerability. An unauthenticated, remote attacker can exploit this, via a specially crafted request, to execute arbitrary commands.

Binary data sophos_web_appliance_CVE-2023-1671.nbin
VendorProductVersionCPE
sophosweb_appliancecpe:/a:sophos:web_appliance

0.969 High

EPSS

Percentile

99.7%