{"cvss":9.8,"datePublished":"2023-11-16","dateUpdated":"2023-11-16","description":"Sophos Web Appliance contains a command injection vulnerability in the warn-proceed handler that allows for remote code execution.","dueDate":"2023-12-07","id":"CVE-2023-1671","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Unknown","notes":"https://www.sophos.com/en-us/security-advisories/sophos-sa-20230404-swa-rce;  https://nvd.nist.gov/vuln/detail/CVE-2023-1671","product":"Web Appliance","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","severity":"CRITICAL","source":"cisa_known_exploited","title":"Sophos Web Appliance Command Injection Vulnerability","vendor":"Sophos"}