Lucene search
HistoryApr 04, 2023 - 10:15 a.m.
CVE-2023-1671
sophos web appliance
pre-auth
command injection
vulnerability
warn-proceed handler
arbitrary code
cve-2023-1671
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.8 High
AI Score
Confidence
High
0.965 High
EPSS
Percentile
99.6%
A pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance older than version 4.3.10.4 allows execution of arbitrary code.
Affected configurations
Node
sophosweb_applianceRange<4.3.10.4
Related
prion
prion
Command injection
2023-04-04 10:15:00
cvelist
cvelist
CVE-2023-1671
2023-04-04 00:00:00
nuclei
nuclei
Sophos Web Appliance - Remote Code Execution
2023-04-27 15:42:42
saint
saint
Sophos Web Appliance UsrBlocked.php command injection
2023-11-24 00:00:00
Sophos Web Appliance UsrBlocked.php command injection
2023-11-24 00:00:00
githubexploit
githubexploit
Exploit for Command Injection in Sophos Web Appliance
2023-04-25 15:19:41
Exploit for Command Injection in Sophos Web Appliance
2023-04-24 15:53:42
Exploit for Command Injection in Sophos Web Appliance
2023-04-27 04:31:44
nessus
nessus
Sophos Web Appliance Pre-Authentication Command Injection (CVE-2023-1671)
2023-05-18 00:00:00
zdt
zdt
Sophos Web Appliance 4.3.10.4 - Pre-auth command injection Exploit
2023-04-25 00:00:00
cve
cve
CVE-2023-1671
2023-04-04 10:15:07
cisa_kev
cisa_kev
Sophos Web Appliance Command Injection Vulnerability
2023-11-16 00:00:00
attackerkb
attackerkb
CVE-2023-1671
2023-04-04 00:00:00
packetstorm
packetstorm
Sophos Web Appliance 4.3.10.4 Command Injection
2023-04-26 00:00:00
exploitdb
exploitdb
Sophos Web Appliance 4.3.10.4 - Pre-auth command injection
2023-04-25 00:00:00
thn
thn
CISA Adds Three Security Flaws with Active Exploitation to KEV Catalog
2023-11-17 05:57:00
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.8 High
AI Score
Confidence
High
0.965 High
EPSS
Percentile
99.6%
Related for NVD:CVE-2023-1671