High severity7.2NVD Advisory· Published Apr 4, 2023· Updated Jun 17, 2026
CVE-2022-4934
CVE-2022-4934
Description
A post-auth command injection vulnerability in the exception wizard of Sophos Web Appliance older than version 4.3.10.4 allows administrators to execute arbitrary code.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:sophos:web_appliance:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:sophos:web_appliance:*:*:*:*:*:*:*:*range: <4.3.10.4
- (no CPE)range: <4.3.10.4
- (no CPE)range: unspecified
Patches
Vulnerability mechanics
References
1- www.sophos.com/en-us/security-advisories/sophos-sa-20230404-swa-rcenvdVendor Advisory
News mentions
0No linked articles in our index yet.