Known Exploited Vulnerabilities November 16, 2023 · CISA KEV Catalog

CVE-2023-1671: Sophos Web Appliance Command Injection Vulnerability

Sophos Web Appliance contains a command injection vulnerability in the warn-proceed handler that allows for remote code execution.

Read the original at CISA KEV Catalog ↗

Topics

Vulnerabilities & Patching

Mentions

CVE-2023-1671Sophos

Related

CVE-2020-29574: CyberoamOS (CROS) SQL Injection Vulnerability Known Exploited Vulnerabilities · Feb 06, 2025

CVE-2020-15069: Sophos XG Firewall Buffer Overflow Vulnerability Known Exploited Vulnerabilities · Feb 06, 2025

CVE-2022-3236: Sophos Firewall Code Injection Vulnerability Known Exploited Vulnerabilities · Sep 23, 2022