CVE-2014-2849

This Metasploit module exploits CVE-2024-2850 by chaining a mass assignment vulnerability to change the admin password and a command injection flaw in the network interface configuration to achieve remote code execution as root on Sophos Web Protection Appliance.

This Metasploit module exploits two vulnerabilities in Sophos Web Protection Appliance: a mass assignment flaw to change the admin password and a command injection in the network interface configuration. It achieves authenticated RCE as root.