critical9.8Public exploit code
CVE-2017-6182
In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's interface responsible for generating reports was vulnerable to remote command injectio…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Sophos Web Appliance 4.3.0.2 - 'trafficType' Remote Command Injection (Metasploit)2017-07-18 · webapps · json · Verified
Impact
In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's interface responsible for generating reports was vulnerable to remote command injection via functions, aka NSWA-1304.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sophos | Web Appliance | through 4.3.1.1 |