CVE-2013-4983: The get_referers function in /opt/ws/bin/sblistpack in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3...

Security readout for executives and security teams

This is a remote command execution issue in Sophos Web Appliance. A remote attacker could abuse the domain parameter in an end-user page to run arbitrary commands on vulnerable appliance versions. The source bundle does not provide CVSS scoring or evidence of active exploitation. Exposure is most likely where Sophos Web Appliance end-user functionality is reachable by untrusted users and the appliance runs an affected pre-fix version. The bundle does not identify broader affected products or CPEs. Prioritize remediation for internet-facing or broadly reachable appliances. Even without CVSS data, remote command execution on a web security appliance presents meaningful business risk and could undermine traffic inspection controls. Mitigation focus: Upgrade Sophos Web Appliance to 3.7.9.1, 3.8.1.1, or later fixed guidance.; Review the Sophos knowledgebase article for vendor-supported remediation details.; Restrict untrusted access to the end-user interface until remediation is complete..

Prepared

Jun 14, 2026, 15:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.