Sophos Web Appliance: Command Injection (CVE-2023-1671) ยท updates https://pwn.watch/i/sophos-web-appliance-cve-2023-1671 Sophos Web Appliance contains a command injection vulnerability in the warn-proceed handler that allows for remote code execution. Added to CISA KEV on 2023-11-16. en Thu, 16 Nov 2023 00:00:00 GMT Sophos Web Appliance: Command Injection (CVE-2023-1671): CISA added CVE-2023-1671 to the KEV catalog (due 2023-12-07). https://pwn.watch/i/sophos-web-appliance-cve-2023-1671 https://pwn.watch/i/sophos-web-appliance-cve-2023-1671#2023-11-16-470ae71c Thu, 16 Nov 2023 00:00:00 GMT critical <p>Sophos Web Appliance: Command Injection (CVE-2023-1671): CISA added CVE-2023-1671 to the KEV catalog (due 2023-12-07).</p>