What is CVE-2013-4983?

CVE-2013-4983 is a vulnerability in Sophos Web_appliance, classified under OS Command Injection. Published 2013-09-10.

Is CVE-2013-4983 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

RCE in Sophos Web_appliance

CVE-2013-4983

The get_referers function in /opt/ws/bin/sblistpack in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the domain parameter to end-user/index.php.

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.928 (99.8th percentile) — read the EPSS interpretation.

Affected products

Sophos Web_appliance
Sophos Web_appliance_firmware — versions 3.7.8, 3.0.0, 3.0.1
N/a — versions n/a

Weakness classification (CWE)

CWE-78 — OS Command Injection

Public proof-of-concept exploits

rapid7/metasploit-framework

References

cve@mitre.org (Exploit, x_refsource_MISC)
cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2013-4983?: CVE-2013-4983 is a vulnerability in Sophos Web_appliance, classified under OS Command Injection. Published 2013-09-10.
Is CVE-2013-4983 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.