sophos exploit-prevention CVE-2021-25269 vulnerability in Sophos Products
Published on November 26, 2021

A local administrator could prevent the HMPA service from starting despite tamper protection using an unquoted service path vulnerability in the HMPA component of Sophos Intercept X Advanced and Sophos Intercept X Advanced for Server before version 2.0.23, as well as Sophos Exploit Prevention before version 3.8.3.

NVD

Vulnerability Analysis

CVE-2021-25269 can be exploited with local system access, and requires user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity, and a high impact on availability.

Attack Vector:
LOCAL
Attack Complexity:
LOW
Privileges Required:
HIGH
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
NONE
Integrity Impact:
NONE
Availability Impact:
HIGH

Products Associated with CVE-2021-25269

Want to know whenever a new CVE is published for Sophos products? stack.watch will email you.

Sophos Exploit Prevention
 
Sophos Intercept X Endpoint
 
Sophos Intercept X For Server
 

Affected Versions

Sophos Intercept X Advanced: Sophos Intercept X Advanced for Server: Sophos Exploit Prevention:

Exploit Probability

EPSS
0.05%
Percentile
16.57%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.