Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-25269

Опубликовано: 26 нояб. 2021
Источник: nvd
CVSS3: 4.4
CVSS2: 2.1
EPSS Низкий

Описание

A local administrator could prevent the HMPA service from starting despite tamper protection using an unquoted service path vulnerability in the HMPA component of Sophos Intercept X Advanced and Sophos Intercept X Advanced for Server before version 2.0.23, as well as Sophos Exploit Prevention before version 3.8.3.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:sophos:exploit_prevention:*:*:*:*:*:*:*:*
Версия до 3.8.3 (исключая)
cpe:2.3:a:sophos:intercept_x_endpoint:*:*:*:*:*:*:*:*
Версия до 2.0.23 (исключая)
cpe:2.3:a:sophos:intercept_x_for_server:*:*:*:*:*:*:*:*
Версия до 2.0.23 (исключая)

EPSS

Процентиль: 17%
0.00054
Низкий

4.4 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-428

Связанные уязвимости

github
около 4 лет назад

A local administrator could prevent the HMPA service from starting despite tamper protection using an unquoted service path vulnerability in the HMPA component of Sophos Intercept X Advanced and Sophos Intercept X Advanced for Server before version 2.0.23, as well as Sophos Exploit Prevention before version 3.8.3.

EPSS

Процентиль: 17%
0.00054
Низкий

4.4 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-428