CVE-2021-25266 vulnerability in Sophos Products
Published on April 27, 2022
An insecure data storage vulnerability allows a physical attacker with root privileges to retrieve TOTP secret keys from unlocked phones in Sophos Authenticator for Android version 3.4 and older, and Intercept X for Mobile (Android) before version 9.7.3495.
Vulnerability Analysis
CVE-2021-25266 is exploitable with physical access, and requires user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.
Products Associated with CVE-2021-25266
stack.watch emails you whenever new vulnerabilities are published in Sophos Intercept X or Sophos Authenticator. Just hit a watch button to start following.
Affected Versions
Sophos Intercept X for Mobile (Android):- Version unspecified and below 9.7.3495 is affected.
- Version unspecified, <= 3.4 is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.