National Vulnerability Database

National Vulnerability Database

National Vulnerability
Database

Vulnerability Change Record for CVE-2019-17059

Change History

Initial Analysis - 10/16/2019 8:58:44 AM

Action Type Old Value New Value
Changed Reference Type
https://community.sophos.com/kb/en-us/134732 No Types Assigned
https://community.sophos.com/kb/en-us/134732 Vendor Advisory
Changed Reference Type
https://community.sophos.com/products/cyberoamos/ No Types Assigned
https://community.sophos.com/products/cyberoamos/ Vendor Advisory
Changed Reference Type
https://thebestvpn.com/cyberoam-preauth-rce/ No Types Assigned
https://thebestvpn.com/cyberoam-preauth-rce/ Exploit, Third Party Advisory
Added CWE
NIST CWE-74
Added CVSS V2
NIST (AV:N/AC:L/Au:N/C:C/I:C/A:C)
Added CVSS V3.1
NIST AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Added CPE Configuration
AND
     OR
          *cpe:2.3:o:sophos:cyberoamos:*:*:*:*:*:*:*:* versions up to (excluding) 10.6.6
          *cpe:2.3:o:sophos:cyberoamos:10.6.6:-:*:*:*:*:*:*
          *cpe:2.3:o:sophos:cyberoamos:10.6.6:maintenance_release1:*:*:*:*:*:*
          *cpe:2.3:o:sophos:cyberoamos:10.6.6:maintenance_release2:*:*:*:*:*:*
          *cpe:2.3:o:sophos:cyberoamos:10.6.6:maintenance_release3:*:*:*:*:*:*
          *cpe:2.3:o:sophos:cyberoamos:10.6.6:maintenance_release4:*:*:*:*:*:*
          *cpe:2.3:o:sophos:cyberoamos:10.6.6:maintenance_release5:*:*:*:*:*:*
     OR
          cpe:2.3:h:sophos:cyberoam:-:*:*:*:*:*:*:*