Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2019-17059

Quick assessment

Affected
n/a n/a
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Sophos Cyberoam firewall appliance是英国Sophos公司的一款防火墙设备。CyberoamOS是运行在其中的一套操作系统。 Sophos Cyberoam firewall appliance中的CyberoamOS 10.6.6 MR-6之前版本存在注入漏洞。攻击者可借助Web Admin和SSL VPN控制台利用该漏洞执行任意命令。

AI Predicted 9.8 Difficulty: Easy EPSS 7.41% · P94

Possible ATT&CK Techniques 1 AI

T1059 · Command and Scripting Interpreter
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2019-17059

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A shell injection vulnerability on the Sophos Cyberoam firewall appliance with CyberoamOS before 10.6.6 MR-6 allows remote attackers to execute arbitrary commands via the Web Admin and SSL VPN consoles.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Sophos Cyberoam firewall appliance CyberoamOS 注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Sophos Cyberoam firewall appliance是英国Sophos公司的一款防火墙设备。CyberoamOS是运行在其中的一套操作系统。 Sophos Cyberoam firewall appliance中的CyberoamOS 10.6.6 MR-6之前版本存在注入漏洞。攻击者可借助Web Admin和SSL VPN控制台利用该漏洞执行任意命令。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2019-17059

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2019-17059

请登录查看更多情报信息。

Other References for CVE-2019-17059 (3)

Same Patch Batch · n/a · 2019-10-11 · 44 CVEs total

CVE-2015-9481 WordPress ThemeMakers Diplomat|Political theme 信息泄露漏洞
CVE-2019-14510 Kaseya VSA RMM 安全漏洞
CVE-2019-17504 Kirona Solutions Dynamic Resource Scheduling 跨站脚本漏洞
CVE-2010-5334 IceWarp Webclient 路径遍历漏洞
CVE-2010-5337 IceWarp Webclient 跨站脚本漏洞
CVE-2010-5338 IceWarp Webclient 跨站脚本漏洞
CVE-2010-5339 IceWarp Webclient 跨站脚本漏洞
CVE-2010-5340 IceWarp Webclient 跨站脚本漏洞
CVE-2019-17499 Compal CH7465LG 操作系统命令注入漏洞
CVE-2010-5336 IceWarp Webclient 跨站脚本漏洞
CVE-2019-17503 Kirona Solutions Dynamic Resource Scheduling 信息泄露漏洞
CVE-2015-9482 WordPress ThemeMakers Car Dealer / Auto Dealer Responsive theme 信息泄露漏洞
CVE-2015-9483 WordPress ThemeMakers Invento Responsive Gallery/Architecture Template 信息泄露漏洞
CVE-2015-9484 WordPress ThemeMakers Accio One Page Parallax Responsive theme 信息泄露漏洞
CVE-2015-9485 WordPress ThemeMakers Accio Responsive Parallax One Page Site Template信息泄露漏洞
CVE-2015-9486 WordPress ThemeMakers Axioma Premium Responsive theme 信息泄露漏洞
CVE-2015-9487 WordPress ThemeMakers Almera Responsive Portfolio theme 信息泄露漏洞
CVE-2015-9488 WordPress ThemeMakers Almera Responsive Portfolio Site Template 信息泄露漏洞
CVE-2015-9489 WordPress ThemeMakers Goodnex Premium Responsive theme 信息泄露漏洞
CVE-2015-9490 WordPress ThemeMakers GamesTheme Premium theme 信息泄露漏洞

Showing top 20 of 44 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2019-17059

No comments yet

Leave a comment