Vulnerabilitycritical

Sophos patches three issues in Sophos Web Security appliance

Security Affairsby @securityaffairsApr 10, 2023 · 15:35 UTC (Apr 10, 2023)1 min read2 · 1 read

Read at securityaffairs.com

Analyze CVE-2023-1671 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2023-1671 CVE-2022-4934 CVE-2020-36692

Tags: cve-2023-1671 cve-2022-4934 cve-2020-36692 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-1671 +2 related CVEs CVE-2022-4934 CVE-2020-36692	Command Injection RCE in Sophos Web Appliance Warn-Proceed Handler	9.8 group max	100%	KEVPoC	Apr 4, 2023 KEV Nov 16, 2023

From the original article

1 min read at securityaffairs.com

Sophos addressed three vulnerabilities in Sophos Web Appliance, including a critical flaw that can lead to code execution. Cybersecurity vendor Sophos addressed three vulnerabilities in Sophos Web Appliance, including a critical flaw, tracked as CVE-2023-1671 (CVSS score of 9. 8), that can lead to code execution.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.