CVE-2014-2850 The network interface configuration page (netinterface) in Sophos Web Appliance before 3.8.2 allows remote administrators to execute arbitrary commands via shell metacharacters in the address paramete...
HighCVSS 8.5
EPSS 57.6%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The network interface configuration page (netinterface) in Sophos Web Appliance before 3.8.2 allows remote administrators to execute arbitrary commands via shell metacharacters in the address parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sophos web appliance firmware | = 3.7.8 | No fix listed |
| sophos web appliance firmware | <= 3.8.1.1 | No fix listed |
| sophos web appliance firmware | = 3.0.0 | No fix listed |
| sophos web appliance firmware | = 3.0.1 | No fix listed |
| sophos web appliance firmware | = 3.0.1.1 | No fix listed |
| sophos web appliance firmware | = 3.0.2 | No fix listed |
| sophos web appliance firmware | = 3.0.3 | No fix listed |
| sophos web appliance firmware | = 3.0.4 | No fix listed |
| sophos web appliance firmware | = 3.0.5 | No fix listed |
| sophos web appliance firmware | = 3.0.5.1 | No fix listed |
| sophos web appliance firmware | = 3.1.0 | No fix listed |
| sophos web appliance firmware | = 3.1.0.1 | No fix listed |
| sophos web appliance firmware | = 3.1.1 | No fix listed |
| sophos web appliance firmware | = 3.1.2 | No fix listed |
| sophos web appliance firmware | = 3.1.3 | No fix listed |
| sophos web appliance firmware | = 3.1.4 | No fix listed |
| sophos web appliance firmware | = 3.2.1 | No fix listed |
| sophos web appliance firmware | = 3.2.2 | No fix listed |
| sophos web appliance firmware | = 3.2.2.1 | No fix listed |
| sophos web appliance firmware | = 3.2.3 | No fix listed |
| sophos web appliance firmware | = 3.2.4 | No fix listed |
| sophos web appliance firmware | = 3.2.5 | No fix listed |
| sophos web appliance firmware | = 3.2.6 | No fix listed |
| sophos web appliance firmware | = 3.2.7 | No fix listed |
| sophos web appliance firmware | = 3.3.0 | No fix listed |
Show 54 more
| Product | Affected versions | Fixed in |
|---|---|---|
| sophos web appliance firmware | = 3.3.1 | No fix listed |
| sophos web appliance firmware | = 3.3.2 | No fix listed |
| sophos web appliance firmware | = 3.3.3 | No fix listed |
| sophos web appliance firmware | = 3.3.3.1 | No fix listed |
| sophos web appliance firmware | = 3.3.4 | No fix listed |
| sophos web appliance firmware | = 3.3.5 | No fix listed |
| sophos web appliance firmware | = 3.3.5.1 | No fix listed |
| sophos web appliance firmware | = 3.3.6 | No fix listed |
| sophos web appliance firmware | = 3.3.6.1 | No fix listed |
| sophos web appliance firmware | = 3.4.0 | No fix listed |
| sophos web appliance firmware | = 3.4.1 | No fix listed |
| sophos web appliance firmware | = 3.4.2 | No fix listed |
| sophos web appliance firmware | = 3.4.3 | No fix listed |
| sophos web appliance firmware | = 3.4.3.1 | No fix listed |
| sophos web appliance firmware | = 3.4.4 | No fix listed |
| sophos web appliance firmware | = 3.4.5 | No fix listed |
| sophos web appliance firmware | = 3.4.6 | No fix listed |
| sophos web appliance firmware | = 3.4.7 | No fix listed |
| sophos web appliance firmware | = 3.4.8 | No fix listed |
| sophos web appliance firmware | = 3.5.0 | No fix listed |
| sophos web appliance firmware | = 3.5.1 | No fix listed |
| sophos web appliance firmware | = 3.5.1.1 | No fix listed |
| sophos web appliance firmware | = 3.5.1.2 | No fix listed |
| sophos web appliance firmware | = 3.5.2 | No fix listed |
| sophos web appliance firmware | = 3.5.3 | No fix listed |
| sophos web appliance firmware | = 3.5.4 | No fix listed |
| sophos web appliance firmware | = 3.5.5 | No fix listed |
| sophos web appliance firmware | = 3.5.6 | No fix listed |
| sophos web appliance firmware | = 3.6.1 | No fix listed |
| sophos web appliance firmware | = 3.6.1.1 | No fix listed |
| sophos web appliance firmware | = 3.6.2 | No fix listed |
| sophos web appliance firmware | = 3.6.2.1 | No fix listed |
| sophos web appliance firmware | = 3.6.2.3 | No fix listed |
| sophos web appliance firmware | = 3.6.2.4.0 | No fix listed |
| sophos web appliance firmware | = 3.6.2.4.1 | No fix listed |
| sophos web appliance firmware | = 3.6.3 | No fix listed |
| sophos web appliance firmware | = 3.6.4 | No fix listed |
| sophos web appliance firmware | = 3.6.4.1 | No fix listed |
| sophos web appliance firmware | = 3.6.4.2 | No fix listed |
| sophos web appliance firmware | = 3.7.0 | No fix listed |
| sophos web appliance firmware | = 3.7.1 | No fix listed |
| sophos web appliance firmware | = 3.7.2 | No fix listed |
| sophos web appliance firmware | = 3.7.3 | No fix listed |
| sophos web appliance firmware | = 3.7.4 | No fix listed |
| sophos web appliance firmware | = 3.7.5 | No fix listed |
| sophos web appliance firmware | = 3.7.6 | No fix listed |
| sophos web appliance firmware | = 3.7.7 | No fix listed |
| sophos web appliance firmware | = 3.7.8.1 | No fix listed |
| sophos web appliance firmware | = 3.7.8.2 | No fix listed |
| sophos web appliance firmware | = 3.7.9 | No fix listed |
| sophos web appliance firmware | = 3.7.9.1 | No fix listed |
| sophos web appliance firmware | = 3.8.0 | No fix listed |
| sophos web appliance firmware | = 3.8.1 | No fix listed |
| sophos web appliance | All versions | No fix listed |
References
- 57706 third-party-advisory vendor-advisory
- 32789 exploit
- 66734 vdb-entry
- www.sophos.com vendor-advisory
- www.zerodayinitiative.com