CVE
CVE-2014-2850
- First Reported
- Oct 21, 2026
- Latest Reported
- Oct 21, 2026
CVE Enrichment
- CVSS
- 8.5 HIGH
- EPSS
- 57.57%
- EPSS Percentile
- 99.08%
- CISA KEV
- Not listed
Description
The network interface configuration page (netinterface) in Sophos Web Appliance before 3.8.2 allows remote administrators to execute arbitrary commands via shell metacharacters in the address parameter.
Technical Details
- CVSS Version
- 2.0
- CNA / NVD Source
- cve@mitre.org
- Published
- 11-Apr-2014 22:55
- Last Modified
- 17-Jun-2026 07:07
- EPSS Date
- 2026-10-20
- CWE
- CWE-78
CVSS Vector
AV:N /
AC:M /
Au:S /
C:C /
I:C /
A:C
Affected Products / Versions
- sophos / web_appliance_firmware
Version / affected range: 3.7.8
cpe:2.3:a:sophos:web_appliance_firmware:3.7.8:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: * · through (inclusive) 3.8.1.1
cpe:2.3:o:sophos:web_appliance_firmware:*:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.0.0
cpe:2.3:o:sophos:web_appliance_firmware:3.0.0:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.0.1
cpe:2.3:o:sophos:web_appliance_firmware:3.0.1:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.0.1.1
cpe:2.3:o:sophos:web_appliance_firmware:3.0.1.1:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.0.2
cpe:2.3:o:sophos:web_appliance_firmware:3.0.2:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.0.3
cpe:2.3:o:sophos:web_appliance_firmware:3.0.3:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.0.4
cpe:2.3:o:sophos:web_appliance_firmware:3.0.4:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.0.5
cpe:2.3:o:sophos:web_appliance_firmware:3.0.5:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.0.5.1
cpe:2.3:o:sophos:web_appliance_firmware:3.0.5.1:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.1.0
cpe:2.3:o:sophos:web_appliance_firmware:3.1.0:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.1.0.1
cpe:2.3:o:sophos:web_appliance_firmware:3.1.0.1:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.1.1
cpe:2.3:o:sophos:web_appliance_firmware:3.1.1:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.1.2
cpe:2.3:o:sophos:web_appliance_firmware:3.1.2:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.1.3
cpe:2.3:o:sophos:web_appliance_firmware:3.1.3:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.1.4
cpe:2.3:o:sophos:web_appliance_firmware:3.1.4:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.2.1
cpe:2.3:o:sophos:web_appliance_firmware:3.2.1:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.2.2
cpe:2.3:o:sophos:web_appliance_firmware:3.2.2:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.2.2.1
cpe:2.3:o:sophos:web_appliance_firmware:3.2.2.1:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.2.3
cpe:2.3:o:sophos:web_appliance_firmware:3.2.3:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.2.4
cpe:2.3:o:sophos:web_appliance_firmware:3.2.4:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.2.5
cpe:2.3:o:sophos:web_appliance_firmware:3.2.5:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.2.6
cpe:2.3:o:sophos:web_appliance_firmware:3.2.6:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.2.7
cpe:2.3:o:sophos:web_appliance_firmware:3.2.7:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.3.0
cpe:2.3:o:sophos:web_appliance_firmware:3.3.0:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.3.1
cpe:2.3:o:sophos:web_appliance_firmware:3.3.1:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.3.2
cpe:2.3:o:sophos:web_appliance_firmware:3.3.2:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.3.3
cpe:2.3:o:sophos:web_appliance_firmware:3.3.3:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.3.3.1
cpe:2.3:o:sophos:web_appliance_firmware:3.3.3.1:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.3.4
cpe:2.3:o:sophos:web_appliance_firmware:3.3.4:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.3.5
cpe:2.3:o:sophos:web_appliance_firmware:3.3.5:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.3.5.1
cpe:2.3:o:sophos:web_appliance_firmware:3.3.5.1:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.3.6
cpe:2.3:o:sophos:web_appliance_firmware:3.3.6:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.3.6.1
cpe:2.3:o:sophos:web_appliance_firmware:3.3.6.1:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.4.0
cpe:2.3:o:sophos:web_appliance_firmware:3.4.0:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.4.1
cpe:2.3:o:sophos:web_appliance_firmware:3.4.1:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.4.2
cpe:2.3:o:sophos:web_appliance_firmware:3.4.2:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.4.3
cpe:2.3:o:sophos:web_appliance_firmware:3.4.3:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.4.3.1
cpe:2.3:o:sophos:web_appliance_firmware:3.4.3.1:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.4.4
cpe:2.3:o:sophos:web_appliance_firmware:3.4.4:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.4.5
cpe:2.3:o:sophos:web_appliance_firmware:3.4.5:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.4.6
cpe:2.3:o:sophos:web_appliance_firmware:3.4.6:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.4.7
cpe:2.3:o:sophos:web_appliance_firmware:3.4.7:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.4.8
cpe:2.3:o:sophos:web_appliance_firmware:3.4.8:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.5.0
cpe:2.3:o:sophos:web_appliance_firmware:3.5.0:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.5.1
cpe:2.3:o:sophos:web_appliance_firmware:3.5.1:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.5.1.1
cpe:2.3:o:sophos:web_appliance_firmware:3.5.1.1:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.5.1.2
cpe:2.3:o:sophos:web_appliance_firmware:3.5.1.2:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.5.2
cpe:2.3:o:sophos:web_appliance_firmware:3.5.2:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.5.3
cpe:2.3:o:sophos:web_appliance_firmware:3.5.3:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.5.4
cpe:2.3:o:sophos:web_appliance_firmware:3.5.4:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.5.5
cpe:2.3:o:sophos:web_appliance_firmware:3.5.5:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.5.6
cpe:2.3:o:sophos:web_appliance_firmware:3.5.6:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.6.1
cpe:2.3:o:sophos:web_appliance_firmware:3.6.1:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.6.1.1
cpe:2.3:o:sophos:web_appliance_firmware:3.6.1.1:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.6.2
cpe:2.3:o:sophos:web_appliance_firmware:3.6.2:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.6.2.1
cpe:2.3:o:sophos:web_appliance_firmware:3.6.2.1:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.6.2.3
cpe:2.3:o:sophos:web_appliance_firmware:3.6.2.3:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.6.2.4.0
cpe:2.3:o:sophos:web_appliance_firmware:3.6.2.4.0:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.6.2.4.1
cpe:2.3:o:sophos:web_appliance_firmware:3.6.2.4.1:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.6.3
cpe:2.3:o:sophos:web_appliance_firmware:3.6.3:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.6.4
cpe:2.3:o:sophos:web_appliance_firmware:3.6.4:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.6.4.1
cpe:2.3:o:sophos:web_appliance_firmware:3.6.4.1:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.6.4.2
cpe:2.3:o:sophos:web_appliance_firmware:3.6.4.2:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.7.0
cpe:2.3:o:sophos:web_appliance_firmware:3.7.0:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.7.1
cpe:2.3:o:sophos:web_appliance_firmware:3.7.1:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.7.2
cpe:2.3:o:sophos:web_appliance_firmware:3.7.2:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.7.3
cpe:2.3:o:sophos:web_appliance_firmware:3.7.3:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.7.4
cpe:2.3:o:sophos:web_appliance_firmware:3.7.4:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.7.5
cpe:2.3:o:sophos:web_appliance_firmware:3.7.5:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.7.6
cpe:2.3:o:sophos:web_appliance_firmware:3.7.6:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.7.7
cpe:2.3:o:sophos:web_appliance_firmware:3.7.7:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.7.8.1
cpe:2.3:o:sophos:web_appliance_firmware:3.7.8.1:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.7.8.2
cpe:2.3:o:sophos:web_appliance_firmware:3.7.8.2:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.7.9
cpe:2.3:o:sophos:web_appliance_firmware:3.7.9:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.7.9.1
cpe:2.3:o:sophos:web_appliance_firmware:3.7.9.1:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.8.0
cpe:2.3:o:sophos:web_appliance_firmware:3.8.0:*:*:*:*:*:*:* - sophos / web_appliance_firmware
Version / affected range: 3.8.1
cpe:2.3:o:sophos:web_appliance_firmware:3.8.1:*:*:*:*:*:*:* - sophos / web_appliance
Version / affected range: -
cpe:2.3:h:sophos:web_appliance:-:*:*:*:*:*:*:*
References
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.
Reported Context (1)
- Apache Struts remote code execution, and a command injection in a discontinued Sophos Web Appliance (`CVE-2014-2850`). WatchGuard H1 2026 Report Finds More Novel Malware Despite Falling Network Detections
CVE (7)
Malware (10)
Threat Actors (4)
MITRE ATT&CK (15)
Vendors (2)
Products (10)
Tools (3)
Countries (10)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.