VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 7, 2014· Updated May 6, 2026

CVE-2014-5502

CVE-2014-5502

Description

The Sophos Cyberoam appliances with CyberoamOS before 10.6.1 GA allows remote authenticated users to inject arbitrary commands via a (1) checkcert_key, (2) webclient_portal_settings, (3) sslvpn_liveuser_delete, or (4) ccc_flush_sql_file opcode.

Affected products

2
  • Cyberoam/Cyberoamos2 versions
    cpe:2.3:o:cyberoam:cyberoam_os:*:ga:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:cyberoam:cyberoam_os:*:ga:*:*:*:*:*:*range: <=10.4
    • cpe:2.3:o:cyberoam:cyberoam_os:*:rc4:*:*:*:*:*:*range: <=10.6.1

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

5

News mentions

0

No linked articles in our index yet.