Unscored severity · published Sep 10, 2013
CVE-2013-4983
The get_referers function in /opt/ws/bin/sblistpack in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows remote attackers to execute arbitrary commands via shell…
–
CVSS
90.1%
EPSS
No
On KEV
Description
The get_referers function in /opt/ws/bin/sblistpack in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the domain parameter to end-user/index.php.
Exploitation
Is it being used?
Exploit prediction (EPSS)90.1% · higher than 100% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WA
Web Appliance Firmware · Sophos
3.7.8 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-4983
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-4983
Exploit
http://www.coresecurity.com/advisories/sophos-web-protection-appliance-multiple-vulnerabilities
Vendor Advisory
http://www.sophos.com/en-us/support/knowledgebase/119773.aspx
More from Web Appliance Firmware
–
CVE-2014-2850
The network interface configuration page (netinterface) in Sophos Web Appliance before 3.8.2 allows remote administrators to execute arbitrary commands via shell metacharacters in…
–
CVE-2014-2849
The Change Password dialog box (change_password) in Sophos Web Appliance before 3.8.2 allows remote authenticated users to change the admin user password via a crafted request
–
CVE-2013-2643
Multiple cross-site scripting (XSS) vulnerabilities in Sophos Web Appliance before 3.7.8.2 allow remote attackers to inject arbitrary web script or HTML via the (1) xss parameter…
–
CVE-2013-2642
Sophos Web Appliance before 3.7.8.2 allows (1) remote attackers to execute arbitrary commands via shell metacharacters in the client-ip parameter to the Block page, when using the…
–
CVE-2013-2641
Directory traversal vulnerability in patience.cgi in Sophos Web Appliance before 3.7.8.2 allows remote attackers to read arbitrary files via the id parameter