Security Advisory
CVE-2014-2850
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
The network interface configuration page (netinterface) in Sophos Web Appliance before 3.8.2 allows remote administrators to execute arbitrary commands via shell metacharacters in the address parameter.