Skip to main content

Cyberoam Os

3 CVEs product

Monthly

CVE-2014-5503 Oct 07, 14:55 CRITICAL Act Now

SQL injection vulnerability in the Guest Login Portal in the Sophos Cyberoam appliances with CyberoamOS before 10.6.1 GA allows remote attackers to execute arbitrary SQL commands via the. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

SQLi Sophos Cyberoam Os Cyberoam
NVD
CVSS 2.0
10.0
EPSS
1.3%
CVE-2014-5502 Oct 07, 14:55 CRITICAL Act Now

The Sophos Cyberoam appliances with CyberoamOS before 10.6.1 GA allows remote authenticated users to inject arbitrary commands via a (1) checkcert_key, (2) webclient_portal_settings, (3). Rated critical severity (CVSS 9.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Command Injection Sophos Cyberoam Os Cyberoam
NVD
CVSS 2.0
9.0
EPSS
1.0%
CVE-2014-5501 Oct 07, 14:55 CRITICAL Act Now

Stack-based buffer overflow in the diagnose service in the Sophos Cyberoam appliances with CyberoamOS before 10.6.1 GA allows remote attackers to execute arbitrary code via a crafted webpage or file. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. No vendor patch available.

RCE Buffer Overflow Sophos Cyberoam Os Cyberoam
NVD
CVSS 2.0
9.3
EPSS
6.7%
EPSS 1% CVSS 10.0
CRITICAL Act Now

SQL injection vulnerability in the Guest Login Portal in the Sophos Cyberoam appliances with CyberoamOS before 10.6.1 GA allows remote attackers to execute arbitrary SQL commands via the. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

SQLi Sophos Cyberoam Os +1
NVD
EPSS 1% CVSS 9.0
CRITICAL Act Now

The Sophos Cyberoam appliances with CyberoamOS before 10.6.1 GA allows remote authenticated users to inject arbitrary commands via a (1) checkcert_key, (2) webclient_portal_settings, (3). Rated critical severity (CVSS 9.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Command Injection Sophos Cyberoam Os +1
NVD
EPSS 7% CVSS 9.3
CRITICAL Act Now

Stack-based buffer overflow in the diagnose service in the Sophos Cyberoam appliances with CyberoamOS before 10.6.1 GA allows remote attackers to execute arbitrary code via a crafted webpage or file. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. No vendor patch available.

RCE Buffer Overflow Sophos +2
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy