CVE-2014-5501

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-10-07 · updated 2026-06-17
Weakness: CWE-119

Description

Stack-based buffer overflow in the diagnose service in the Sophos Cyberoam appliances with CyberoamOS before 10.6.1 GA allows remote attackers to execute arbitrary code via a crafted webpage or file.

Affected products

Cyberoam Os: through 10.4; through 10.6.1

References

http://kb.cyberoam.com/default.asp?id=3049
http://www.zerodayinitiative.com/advisories/ZDI-14-334/
http://kb.cyberoam.com/default.asp?id=3049
http://www.zerodayinitiative.com/advisories/ZDI-14-334/

Get alerted when CVE-2014-5501 or the next vulnerability affects your stack