CRITICAL🇵🇱 Wersja polska

CVE-2019-17059

CVSS 9.8v3.1pub. 2019-10-11upd. 2024-11-21

A shell injection vulnerability on the Sophos Cyberoam firewall appliance with CyberoamOS before 10.6.6 MR-6 allows remote attackers to execute arbitrary commands via the Web Admin and SSL VPN consoles.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Sophos Cyberoam

    HW
    Sophos
    all versions

  • Sophos Cyberoamos

    OS
    Sophos
    10.6.6< 10.6.6
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
FirewallVPNCommand Injection
CWE
References

Related vulnerabilities

CVE-2020-29574CRITICAL9.8⚠ KEVPL ✓same product

SQL Injection w Sophos Cyberoam OS — zdalny dostęp bez uwierzytelnienia

CVE-2016-9834MEDIUM6.1same product

An XSS vulnerability allows remote attackers to execute arbitrary client side script on vulnerable installatio...

CVE-2023-1671CRITICAL9.8⚠ KEVPL ✓same vendor

Pre-auth command injection w Sophos Web Appliance (RCE)

CVE-2022-3236CRITICAL9.8⚠ KEVPL ✓same vendor

Code injection w Sophos Firewall — RCE przez User Portal i Webadmin

CVE-2022-1040CRITICAL9.8⚠ KEVPL ✓same vendor

Authentication Bypass z możliwością RCE w Sophos Firewall