CVE-2018-16117

ALTO 8.8CVE-2018-16117 · Published 20/06/2019 · updated 17/06/2026

En resumen

CVE-2018-16117 es una vulnerabilidad ALTO (CVSS 8.8).
Probabilidad de explotación en los próximos 30 días (EPSS): 43.7%, mayor que el 98.7% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

A shell escape vulnerability in /webconsole/Controller in Admin Portal of Sophos XG firewall 17.0.8 MR-8 allow remote authenticated attackers to execute arbitrary OS commands via shell metacharacters in the "dbName" POST parameter.

References

community.sophos.com/kb/en-us/132637 · Vendor Advisory
klsecservices/Advisories · Patch
sophos.com/en-us/legal/sophos-responsible-disclosure-policy.aspx · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free