Skip to content
OpenAdvisories
High · 7.2 CVE-2022-4934 EUVD-2022-52188GHSA-32v8-f8qr-4pv8

A post-auth command injection vulnerability in the exception wizard of Sophos Web Appliance older than version 4.3.10.4 allows administrato…

Published Apr 4, 2023 · Updated Feb 11, 2025 · Assigned by Sophos

Vendor: Sophos Product: Sophos Web Appliance Category: Network devices

Description

A post-auth command injection vulnerability in the exception wizard of Sophos Web Appliance older than version 4.3.10.4 allows administrators to execute arbitrary code.

Affected products

VendorProductAffectedFixed
Sophos Sophos Web Appliance unspecified – < 4.3.10.4 4.3.10.4

References