Critical severity9.8CISA KEVNVD Advisory· Published Apr 4, 2023· Updated Jun 17, 2026
CVE-2023-1671
CVE-2023-1671
Description
A pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance older than version 4.3.10.4 allows execution of arbitrary code.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:sophos:web_appliance:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:sophos:web_appliance:*:*:*:*:*:*:*:*range: <4.3.10.4
- (no CPE)range: <4.3.10.4
- (no CPE)range: unspecified
Patches
Vulnerability mechanics
References
3- packetstormsecurity.com/files/172016/Sophos-Web-Appliance-4.3.10.4-Command-Injection.htmlnvdExploitThird Party AdvisoryVDB Entry
- www.sophos.com/en-us/security-advisories/sophos-sa-20230404-swa-rcenvdVendor Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
News mentions
0No linked articles in our index yet.