CVE-2017-6182 In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's interface responsible for generating reports was vulnerable to remote command injection via functions, aka NSWA-1304.
CriticalCVSS 9.8
EPSS 16.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's interface responsible for generating reports was vulnerable to remote command injection via functions, aka NSWA-1304.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sophos web appliance | <= 4.3.1.1 | No fix listed |
References
- wsa.sophos.com release-notes vendor-advisory
- 97261 vdb-entry
- community.sophos.com vendor-advisory
- 42332 exploit