CVE-2014-5503

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-10-07 · updated 2026-06-17
Weakness: CWE-89

Description

SQL injection vulnerability in the Guest Login Portal in the Sophos Cyberoam appliances with CyberoamOS before 10.6.1 GA allows remote attackers to execute arbitrary SQL commands via the add_guest_user opcode.

Affected products

Cyberoam Os: through 10.4; through 10.6.1

References

http://kb.cyberoam.com/default.asp?id=3049
http://www.zerodayinitiative.com/advisories/ZDI-14-329/
http://kb.cyberoam.com/default.asp?id=3049
http://www.zerodayinitiative.com/advisories/ZDI-14-329/

Get alerted when CVE-2014-5503 or the next vulnerability affects your stack