Firetruck

CVE-2023-1671

KEV
Updated Oct 21, 2025 · PUBLISHED
View KEV entry →

Description

Sophos Web Appliance contains a command injection vulnerability in the warn-proceed handler that allows for remote code execution.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
Sophos Web ApplianceSophos / Sophos Web Appliance>= unspecified, < 4.3.10.4affected