Summary
Sophos Web Protection Appliance is prone to multiple vulnerabilities.
Impact
An unauthenticated remote attacker can execute arbitrary OS commands on the Sophos appliance with the privileges of the spiderman operating system user.
Solution
Update to v3.7.9.1/v3.8.1.1
Insight
Sophos Web Protection Appliance is prone to a pre-authentication OS command injection vulnerability and to a privilege escalation through local OS command injection vulnerability
Affected
Sophos Web Appliance v3.7.9 and earlier.
Sophos Web Appliance v3.8.0.
Sophos Web Appliance v3.8.1.
References
Severity
Classification
-
CVE CVE-2013-4983 -
CVSS Base Score: 10.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
Related Vulnerabilities