Persistent XSS Vulnerability in Sophos XG Firewall's Logging Subsystem

CVE-2017-18014

Summary

A vulnerability within the logging subsystem of the Sophos XG Firewall allows unauthenticated users to exploit a persistent XSS flaw in the webadmin interface. Specifically, this weakness exists in the WAF log page, where an attacker can manipulate the 'User-Agent' parameter in HTTP POST requests. Exploiting this vulnerability could enable unauthorized actions such as creating new user accounts, enabling SSH access, or adding SSH authorized keys, compromising the integrity and security of the firewall configuration.

References