WID-SEC-W-2023-2910

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Sophos Unified Threat Management (UTM) Software: Mehrere Schwachstellen

view advisory published 2023-11-14

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Sophos Unified Threat Management (UTM) Software ausnutzen, um einen Denial of Service Zustand herbeizuführen, Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen oder einen Cross-Site-Scripting-Angriff durchzuführen.

01

describes (3)

Related CVEs.

IDseverity exploitable
CVE-2022-2127USmedium5.9—
An out-of-bounds read vulnerability was found in Samba due to insufficient length checks in winbindd_pam_auth_crap.c. When performing NTLM authentication, the client replies to cry…
CVE-2022-48303USmedium5.5—
GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump. Exploitation to change the flow of control has not been d…
CVE-2021-4429US——
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan