CVE-2017-6183: Sophos Web Appliance

High severity, CVSS 7.2. EPSS: 3.2% chance of exploitation in the next 30 days.

In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's configuration utilities for adding (and detecting) Active Directory servers was vulnerable to remote command injection, aka NSWA-1314.

Affected products

• Sophos Web Appliance: up to and including 4.3.1.1

Published 2017-03-30. Last modified 2026-06-17.