Sophos Web Appliance Firmware vulnerabilities

6 CVEs affecting Sophos Web Appliance Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-2850, published 2014-04-11.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2013-4983, published 2013-09-10. High severity, CVSS 10.0. EPSS: 90.1% chance of exploitation in the next 30 days. The get_referers function in /opt/ws/bin/sblistpack in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the…
CVE-2013-2641, published 2014-03-18. Medium severity, CVSS 5.0. EPSS: 71% chance of exploitation in the next 30 days. Directory traversal vulnerability in patience.cgi in Sophos Web Appliance before 3.7.8.2 allows remote attackers to read arbitrary files via the id parameter.
CVE-2014-2849, published 2014-04-11. High severity, CVSS 8.5. EPSS: 60.9% chance of exploitation in the next 30 days. The Change Password dialog box (change_password) in Sophos Web Appliance before 3.8.2 allows remote authenticated users to change the admin user password via a crafted request.
CVE-2014-2850, published 2014-04-11. High severity, CVSS 8.5. EPSS: 57.6% chance of exploitation in the next 30 days. The network interface configuration page (netinterface) in Sophos Web Appliance before 3.8.2 allows remote administrators to execute arbitrary commands via shell metacharacters in the address…
CVE-2013-2642, published 2014-03-18. High severity, CVSS 9.3. EPSS: 6.9% chance of exploitation in the next 30 days. Sophos Web Appliance before 3.7.8.2 allows (1) remote attackers to execute arbitrary commands via shell metacharacters in the client-ip parameter to the Block page, when using the user_workstation…
CVE-2013-2643, published 2014-03-18. Medium severity, CVSS 4.3. EPSS: 4.5% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in Sophos Web Appliance before 3.7.8.2 allow remote attackers to inject arbitrary web script or HTML via the (1) xss parameter in an allow action…