CVE-2017-6183

High

Published: 30/03/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

In Sophos Web Appliance (SWA) before version 4.3.1.2, a section of the machine's configuration utilities for adding and detecting Active Directory servers was vulnerable to remote command injection.

Risk Assessment

An attacker could exploit this vulnerability to execute arbitrary commands on the device, potentially leading to serious security breaches.

Recommendation

It is recommended to update the device to version 4.3.1.2 or later to mitigate this vulnerability.

Other vulnerabilities in Sophos Web Appliance (SWA)

CVE-2017-6182Critical
In Sophos Web Appliance (SWA) before version 4.3.1.2, a section of the machine's interface responsible for generating reports was vulnerable to remote command injection.

Original NVD description (English source)

In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's configuration utilities for adding (and detecting) Active Directory servers was vulnerable to remote command injection, aka NSWA-1314.