← Database

CVE-2023-1671

CRITICAL CVSS: 9.8 Published: 2023-04-04 Modified: 2026-06-17

Description

A pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance older than version 4.3.10.4 allows execution of arbitrary code.

Affected Platforms

Sophos Web Appliance

Weakness Type

CWE-77, CWE-77

References