Unscored severity · published Apr 11, 2014
CVE-2014-2850
The network interface configuration page (netinterface) in Sophos Web Appliance before 3.8.2 allows remote administrators to execute arbitrary commands via shell metacharacters in…
–
CVSS
57.6%
EPSS
No
On KEV
Description
The network interface configuration page (netinterface) in Sophos Web Appliance before 3.8.2 allows remote administrators to execute arbitrary commands via shell metacharacters in the address parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)57.6% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WA
Web Appliance · Sophos
All versions, or not specified · source: NVD
WA
Web Appliance Firmware · Sophos
3.7.8 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-2850
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-2850
Vendor Advisory
http://secunia.com/advisories/57706
Exploit
http://www.exploit-db.com/exploits/32789
www.securityfocus.com
http://www.securityfocus.com/bid/66734
Vendor Advisory
http://www.sophos.com/en-us/support/knowledgebase/120230.aspx
www.zerodayinitiative.com
http://www.zerodayinitiative.com/advisories/ZDI-14-069/
More from Web Appliance
9.8
CVE-2023-1671
Sophos Web Appliance Command Injection Vulnerability
9.8
CVE-2017-6182
In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's interface responsible for generating reports was vulnerable to remote command injection via functions, aka…
8.1
CVE-2017-6412
In Sophos Web Appliance (SWA) before 4.3.1.2, Session Fixation could occur, aka NSWA-1310
7.2
CVE-2022-4934
A post-auth command injection vulnerability in the exception wizard of Sophos Web Appliance older than version 4.3.10.4 allows administrators to execute arbitrary code
7.2
CVE-2017-6183
In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's configuration utilities for adding (and detecting) Active Directory servers was vulnerable to remote…