CVE-2014-5502

CVE-2014-5502 affects Sophos Cyberoam appliances running CyberoamOS before 10.6.1 GA. The issue allows remote authenticated attackers to inject arbitrary commands via four opcodes: checkcert_key, webclient_portal_settings, sslvpn_liveuser_delete, and ccc_flush_sql_file. ZDI advisories confirm rem...