Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how cyberoam compares to other vendors in security performance

View Risk Score →

Cyberoam Authentication ClientCyberoam Authentication Client 2.1.2.7 - Buffer Overflow (SEH)

Risk 86
Severity
9.8
Buffer Overflow
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Cyberoam Authentication Client 2.1.2.7 contains a buffer overflow vulnerability that allows remote attackers to execute arbitrary code by overwriting Structured Exception Handler (SEH) memory. Attackers can craft a malicious input in the 'Cyberoam Server Address' field to trigger a bind TCP shell on port 1337 with system-level access.

First published (updated )
CVE-2020-37095

Cyberoam CyberoamOSSQL Injection

Risk 52
Severity
7.5
SQL Injection
AV:N/AC:L/Au:N/C:P/I:P/A:P

SQL injection vulnerability in the Sophos Cyberoam CR500iNG-XP firewall appliance with CyberoamOS 10.6.2 MR-1 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter to login.xml.

First published (updated )
CVE-2015-6811

Cyberoam Cyberoam Central ConsolePath Traversal

Risk 52
Severity
7.5
Path Traversal
AV:N/AC:L/Au:N/C:P/I:P/A:P

Directory traversal vulnerability in the WWWHELP Service (js/html/wwhelp.htm) in Cyberoam Central Console (CCC) 2.00.2 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the file parameter in an Onlinehelp action.

First published (updated )
CVE-2012-1047

Cyberoam Cyberoam OsSQL Injection

Risk 87
Severity
10
SQL Injection
AV:N/AC:L/Au:N/C:C/I:C/A:C

SQL injection vulnerability in the Guest Login Portal in the Sophos Cyberoam appliances with CyberoamOS before 10.6.1 GA allows remote attackers to execute arbitrary SQL commands via the addguestuser opcode.

First published (updated )
CVE-2014-5503

Cyberoam Cyberoam OsBuffer Overflow

Risk 79
Severity
9.3
Buffer Overflow
AV:N/AC:M/Au:N/C:C/I:C/A:C

Stack-based buffer overflow in the diagnose service in the Sophos Cyberoam appliances with CyberoamOS before 10.6.1 GA allows remote attackers to execute arbitrary code via a crafted webpage or file.

First published (updated )
CVE-2014-5501

Cyberoam Cyberoam OsOS Command Injection

Risk 78
Severity
9
OS Command Injection
AV:N/AC:L/Au:S/C:C/I:C/A:C

The Sophos Cyberoam appliances with CyberoamOS before 10.6.1 GA allows remote authenticated users to inject arbitrary commands via a (1) checkcertkey, (2) webclientportalsettings, (3) sslvpnliveuserdelete, or (4) cccflushsqlfile opcode.

First published (updated )
CVE-2014-5502

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203