CVE-2023-1671

Sophos Web Appliance Command Injection Vulnerability

The Sophos Web Appliance contains a command injection vulnerability in the warn-proceed handler, allowing remote code execution. This is a critical security flaw that could be exploited by attackers to execute arbitrary commands on the device. DIB organizations should ensure their systems are updated to mitigate this risk.

Shame score — The vulnerability was actively exploited and allowed remote code execution, posing a significant risk to the security of the affected systems.