PT-2023-2216 · Sophos · Sophos Web Appliance

Published 2023-03-28 · Updated 2025-02-11 · CVE-2022-4934

Positive Technologies (AI Summary)

CVSS v2.0

8.5

High

Base vector

AV:N/AC:M/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sophos Web Appliance versions prior to 4.3.10.4

Description A post-auth command injection vulnerability in the exception wizard of Sophos Web Appliance allows administrators to execute arbitrary code. The vulnerability is related to the failure to neutralize special elements when processing exceptions, which can be exploited by a remote attacker to execute arbitrary commands.

Recommendations For versions prior to 4.3.10.4, update to version 4.3.10.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the exception wizard to minimize the risk of exploitation.

Fix

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

BDU:2023-01964

CVE-2022-4934

Affected Products

Sophos Web Appliance

References · 9

• https://sophos.com/en-us/security-advisories/sophos-sa-20230404-swa-rce · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-4934 · Security Note
• https://osv.dev/vulnerability/CVE-2022-4934 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-01964 · Security Note
• https://t.me/cvenotify/47845 · Telegram Post
• https://t.me/cibsecurity/61377 · Telegram Post
• https://t.me/cvenotify/110811 · Telegram Post
• https://t.me/true_secator/4254 · Telegram Post
• https://t.me/cvenotify/47477 · Telegram Post