Sophos Web Appliance Command Injection Vulnerability
CVSS score
—
EPSS probability
%100.0
Risk score
—
Published
2 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
Sophos Web Appliance pre-auth command injection Vulnerability Scanner
Exploit to cve-2023-1671. So there is a test and exploitation function. The test sends a ping request to the dnslog domain from the vulnerable site. If the ping passes, the vulnerability exists, if it doesn't, then cve-2023-1671 is missing. The exploit function, on the other hand, sends a request with your command to the server.
CVE-2023-1671-POC, based on dnslog platform
Sophos Web Appliance 4.3.10.4 - Pre-auth command injection
Nuclei: Sophos Web Appliance - Remote Code Execution
Similar Vulnerabilities
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2023-1671"