CVE-2019-17059

A shell injection vulnerability on the Sophos Cyberoam firewall appliance with CyberoamOS before 10.6.6 MR-6 allows remote attackers to execute arbitrary commands via the Web Admin and SSL VPN consoles.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2019-10-11

Last modified

2024-08-05

Weaknesses

CWE-78

Affected products

• Cyberoamos (Sophos)

References

• https://community.sophos.com/kb/en-us/134732
• https://community.sophos.com/products/cyberoamos/
• https://thebestvpn.com/cyberoam-preauth-rce/