CVE-2019-17059: OS Command Injection
A shell injection vulnerability on the Sophos Cyberoam firewall appliance with CyberoamOS before 10.6.6 MR-6 allows remote attackers to execute arbitrary commands via the Web Admin and SSL VPN consoles.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-17059?
CVE-2019-17059 is a shell injection vulnerability on the Sophos Cyberoam firewall appliance with CyberoamOS before 10.6.6 MR-6.
How does CVE-2019-17059 affect Sophos Cyberoam?
CVE-2019-17059 allows remote attackers to execute arbitrary commands via the Web Admin and SSL VPN consoles.
What is the severity of CVE-2019-17059?
CVE-2019-17059 has a severity rating of 9.8 (Critical).
How can I fix CVE-2019-17059?
To fix CVE-2019-17059, update your Sophos Cyberoam firewall appliance to CyberoamOS 10.6.6 MR-6 or later.
Where can I find more information about CVE-2019-17059?
You can find more information about CVE-2019-17059 at the following references: [Sophos Community Knowledge Base](https://community.sophos.com/kb/en-us/134732), [Sophos Cyberoam Products](https://community.sophos.com/products/cyberoamos/), [The Best VPN](https://thebestvpn.com/cyberoam-preauth-rce/).