CVE-2023-1671

🔥 Known Exploited (CISA KEV)CRITICAL

9.8

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2023-04-04

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

A pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance older than version 4.3.10.4 allows execution of arbitrary code.

Affected Platforms (CPE)

📦

Sophos

Web Appliance

< 4.3.10.4

References & Advisories

🔗 http://packetstormsecurity.com/files/172016/Sophos-Web-Appliance-4.3.10.4-Command-Injection.html

🔗 https://www.sophos.com/en-us/security-advisories/sophos-sa-20230404-swa-rce

🔗 http://packetstormsecurity.com/files/172016/Sophos-Web-Appliance-4.3.10.4-Command-Injection.html

🔗 https://www.sophos.com/en-us/security-advisories/sophos-sa-20230404-swa-rce

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-1671

CVE-2023-1671

Vulnerability Description

Affected Platforms (CPE)

Web Appliance

References & Advisories

相關資安分析文章

周度网络安全新闻：2026 年 7 月 27 日

相关漏洞威胁