CVE-2018-16118

A shell escape vulnerability in /webconsole/APIController in the API Configuration component of Sophos XG firewall 17.0.8 MR-8 allows remote attackers to…

published June 20, 2019

CVSS
—
EPSS
4%
Percentile
89.8
In the wild
Unconfirmed
What it is

A shell escape vulnerability in /webconsole/APIController in the API Configuration component of Sophos XG firewall 17.0.8 MR-8 allows remote attackers to execute arbitrary OS commands via shell metachracters in the "X-Forwarded-for" HTTP header.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03724 · 89.8th percentile
Published
2019-06-20T16:02Z
EPSS history
Timeline
  • 20 JUN 16:02Z
    A shell escape vulnerability in /webconsole/APIController in the API Configuration component of Sophos XG firewall 17.0.8 MR-8 allows remote attackers to…
    cvelistv5