CVE-2017-6182

CRITICAL

Sophos Web Appliance < 4.3.1.1 - OS Command Injection

Title source: rule

Description

In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's interface responsible for generating reports was vulnerable to remote command injection via functions, aka NSWA-1304.

Exploits (1)

exploitdb WORKING POC VERIFIED

by xort · rubywebappsjson

https://www.exploit-db.com/exploits/42332

View Code ZIP pw:eip

References (4)

[Release Notes, Vendor Advisory] http://wsa.sophos.com/rn/swa/concepts/ReleaseNotes_4.3.1.2.html

[Vendor Advisory] https://community.sophos.com/products/web-appliance/b/blog/posts/release-of-swa-v4-3-1-2

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/97261

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/42332/

Scores

CVSS v3 9.8

EPSS 0.1487

EPSS Percentile 94.5%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-78

Status published

Products (1)

sophos/web_appliance < 4.3.1.1

Published Mar 30, 2017

Tracked Since Feb 18, 2026