CVE Catalog
CVE-2017-6182
CriticalSummary
In Sophos Web Appliance (SWA) before version 4.3.1.2, a section of the machine's interface responsible for generating reports was vulnerable to remote command injection.
Risk Assessment
An attacker could exploit this vulnerability to execute arbitrary commands on the device, posing a serious security risk.
Recommendation
It is recommended to update the device to version 4.3.1.2 or later to mitigate this vulnerability.
Original NVD description (English source)
In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's interface responsible for generating reports was vulnerable to remote command injection via functions, aka NSWA-1304.