Sophos: >> Web Appliance Firmware >> 3.7.9 Security Vulnerabilities
The Change Password dialog box (change_password) in Sophos Web Appliance before 3.8.2 allows remote authenticated users to change the admin user password via a crafted request.
CVSS Score
8.5
EPSS Score
0.732
Published
2014-04-11
The network interface configuration page (netinterface) in Sophos Web Appliance before 3.8.2 allows remote administrators to execute arbitrary commands via shell metacharacters in the address parameter.
CVSS Score
8.5
EPSS Score
0.757
Published
2014-04-11