Exploitation Summary
EIP tracks 1 public exploit for CVE-2017-12854. PoCs published by SecuriTeam.
AI-analyzed exploit summary This exploit demonstrates a path traversal vulnerability (CVE-2017-12854) in Sophos XG Firewall 16.05.4 MR-4, allowing authenticated users to download arbitrary files (e.g., /etc/passwd) via crafted requests. It also highlights a missing function-level access control, enabling low-privileged User Portal users to exploit the same vulnerability.
Description
Sophos XG Firewall 16.05.4 MR-4 - Path Traversal
Exploits (1)
This exploit demonstrates a path traversal vulnerability (CVE-2017-12854) in Sophos XG Firewall 16.05.4 MR-4, allowing authenticated users to download arbitrary files (e.g., /etc/passwd) via crafted requests. It also highlights a missing function-level access control, enabling low-privileged User Portal users to exploit the same vulnerability.