Skip to main content
Cyber Retaliator Solutions
Cyber RetaliatorSolutions
All vulnerabilities
CVE-2023-1671

Sophos Web Appliance Command Injection Vulnerability

Sophos — Web Appliance

Added to KEV catalog
16 November 2023
Federal remediation due date
7 December 2023
Weakness classification (CWE)
CWE-77

CISA Description

Sophos Web Appliance contains a command injection vulnerability in the warn-proceed handler that allows for remote code execution.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes

https://www.sophos.com/en-us/security-advisories/sophos-sa-20230404-swa-rce; https://nvd.nist.gov/vuln/detail/CVE-2023-1671

View on NVD View on MITRE CVE View full CISA catalog

More Sophos Vulnerabilities

CVE-2020-15069

Sophos XG Firewall Buffer Overflow Vulnerability

CVE-2020-29574

CyberoamOS (CROS) SQL Injection Vulnerability

CVE-2022-3236

Sophos Firewall Code Injection Vulnerability

CVE-2022-1040

Sophos Firewall Authentication Bypass Vulnerability

CVE-2020-25223

Sophos SG UTM Remote Code Execution Vulnerability

Confirm Your Exposure

Is this vulnerability present in your environment?

CRS delivers independent VAPT assessments that identify exactly which known-exploited vulnerabilities exist in your network, applications, and infrastructure.

Explore VAPT Services