SQL Injection Vulnerability in Sophos Cyberoam Appliances
CVE-2014-5503

Currently unrated

Key Information:

Vendor

Cyberoam

Status
Cyberoam Os
Vendor
CVE Published:
7 October 2014

What is CVE-2014-5503?

A SQL injection vulnerability exists in the Guest Login Portal of Sophos Cyberoam appliances running CyberoamOS prior to version 10.6.1 GA. This flaw enables remote attackers to execute arbitrary SQL commands through the 'add_guest_user' opcode, potentially compromising security by allowing unauthorized access to the system's database and sensitive information. Proper input validation and sanitation practices are essential to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://kb.cyberoam.com/default.asp?id=3049
x_refsource_CONFIRM
http://www.zerodayinitiative.com/advisories/ZDI-14-329/
x_refsource_MISC

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.