Security Advisory

CVE-2023-1671

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-04-04 00:00:00
Last updated 2025-10-21 23:15:21
Assigner Sophos
State PUBLISHED

Description

A pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance older than version 4.3.10.4 allows execution of arbitrary code.