How severe is CVE-2013-5932?

CVE-2013-5932 has a CVSS 2.0 base score of 10.0, rated critical severity.

Is CVE-2013-5932 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 5% (92nd percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2013-5932?

CVE-2013-5932 affects Sophos Unified Threat Management Software. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2013-5932?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.

When was CVE-2013-5932 published?

CVE-2013-5932 was published on 2013-09-23 and last updated on 2026-06-16.

CVE-2013-5932

CVE-2013-5932 is a critical-severity vulnerability in Sophos Unified Threat Management Software with a CVSS 2.0 base score of 10.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: Critical (CVSS 2.0 base score 10.0)
EPSS exploit prediction: 5% (92nd percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Sophos Unified Threat Management Software
Published: 2013-09-23
Last modified: 2026-06-16

Description

Unspecified vulnerability in WebAdmin in Sophos UTM (aka Astaro Security Gateway) before 9.105 has unknown impact and attack vectors.

Frequently asked questions

What is CVE-2013-5932?: Unspecified vulnerability in WebAdmin in Sophos UTM (aka Astaro Security Gateway) before 9.105 has unknown impact and attack vectors.
How severe is CVE-2013-5932?: CVE-2013-5932 has a CVSS 2.0 base score of 10.0, rated critical severity.
Is CVE-2013-5932 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 5% (92nd percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2013-5932?: CVE-2013-5932 affects Sophos Unified Threat Management Software. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2013-5932?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.
When was CVE-2013-5932 published?: CVE-2013-5932 was published on 2013-09-23 and last updated on 2026-06-16.

References

Affected products (1)

cpe:2.3:a:sophos:unified_threat_management_software:9.007:*:*:*:*:*:*:*

More vulnerabilities in Sophos Unified Threat Management Software

CVE-2015-7547 — High (CVSS 8.1): Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU…
CVE-2016-0778 — High (CVSS 8.1): The (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x…
CVE-2014-2537 — High (CVSS 7.8): Memory leak in the TCP stack in the kernel in Sophos UTM before 9.109 allows remote attackers to cause a denial of…
CVE-2016-0777 — Medium (CVSS 6.5): The resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote…
CVE-2016-2046 — Medium (CVSS 6.1): Cross-site scripting (XSS) vulnerability in the UserPortal page in SOPHOS UTM before 9.353 allows remote attackers to…
CVE-2016-7442 — Medium (CVSS 4.4): The Frontend component in Sophos UTM with firmware 9.405-5 and earlier allows local administrators to obtain sensitive…

All CVEs affecting Sophos Unified Threat Management Software →