Cyberoam

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Cyberoam records in CISA KEV

No Cyberoam vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Cyberoam Os 3 records MEDIUM Cyberoam Central Console 1 record LOW Cyberoamos 1 record LOW

Records

3 records in Cyberoam Os · all components

TI-2014-04471 CVE-2014-5503 · GHSA-8m35-82gh-wv5c

SQL injection vulnerability in the Guest Login Portal in the Sophos Cyberoam appliances…

MEDIUM 47

SQL injection vulnerability in the Guest Login Portal in the Sophos Cyberoam appliances with CyberoamOS before 10.6.1 GA allows remote attackers to execute arbitrary SQL commands via the add_guest_user opcode.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.01989 Published 2014-10-07 No fix listed CWE-89

TI-2014-04469 CVE-2014-5501 · GHSA-4w5j-8ww7-64rx

Stack-based buffer overflow in the diagnose service in the Sophos Cyberoam appliances…

MEDIUM 46

Stack-based buffer overflow in the diagnose service in the Sophos Cyberoam appliances with CyberoamOS before 10.6.1 GA allows remote attackers to execute arbitrary code via a crafted webpage or file.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.03661 Published 2014-10-07 No fix listed CWE-119

TI-2014-04470 CVE-2014-5502 · GHSA-cr4p-f3qv-9796

The Sophos Cyberoam appliances with CyberoamOS before 10.6.1 GA allows remote…

MEDIUM 43

The Sophos Cyberoam appliances with CyberoamOS before 10.6.1 GA allows remote authenticated users to inject arbitrary commands via a (1) checkcert_key, (2) webclient_portal_settings, (3) sslvpn_liveuser_delete, or (4) cc…

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.02318 Published 2014-10-07 No fix listed CWE-78

Open these records in search →

Critical	3
High	3
Medium	0
Low	0
No CVSS	0