Vulnerabilities

TI-2014-04471 CVE-2014-5503 · GHSA-8m35-82gh-wv5c

SQL injection vulnerability in the Guest Login Portal in the Sophos Cyberoam appliances…

MEDIUM 47

SQL injection vulnerability in the Guest Login Portal in the Sophos Cyberoam appliances with CyberoamOS before 10.6.1 GA allows remote attackers to execute arbitrary SQL commands via the add_guest_user opcode.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.01989 Published 2014-10-07 No fix listed CWE-89

TI-2014-04470 CVE-2014-5502 · GHSA-cr4p-f3qv-9796

The Sophos Cyberoam appliances with CyberoamOS before 10.6.1 GA allows remote…

MEDIUM 43

The Sophos Cyberoam appliances with CyberoamOS before 10.6.1 GA allows remote authenticated users to inject arbitrary commands via a (1) checkcert_key, (2) webclient_portal_settings, (3) sslvpn_liveuser_delete, or (4) cc…

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.02318 Published 2014-10-07 No fix listed CWE-78

TI-2014-04469 CVE-2014-5501 · GHSA-4w5j-8ww7-64rx

Stack-based buffer overflow in the diagnose service in the Sophos Cyberoam appliances…

MEDIUM 46

Stack-based buffer overflow in the diagnose service in the Sophos Cyberoam appliances with CyberoamOS before 10.6.1 GA allows remote attackers to execute arbitrary code via a crafted webpage or file.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.03661 Published 2014-10-07 No fix listed CWE-119

Vulnerabilities

Filters

SQL injection vulnerability in the Guest Login Portal in the Sophos Cyberoam appliances…

The Sophos Cyberoam appliances with CyberoamOS before 10.6.1 GA allows remote…

Stack-based buffer overflow in the diagnose service in the Sophos Cyberoam appliances…