CVE-2023-1671 Sophos Web Appliance
Sophos Web Appliance contains a command injection vulnerability in the warn-proceed handler that allows for remote code execution.
- CVSS
- not scored
On CISA’s exploited list
Sophos Web Appliance Command Injection Vulnerability
- Added
- 2023-11-16
- Federal patch deadline
- 2023-12-07
- Ransomware use
- not known