CVE-2012-4736: Sophos Safeguard Enterprise

Low severity, CVSS 3.3. EPSS: 0.4% chance of exploitation in the next 30 days.

The Device Encryption Client component in Sophos SafeGuard Enterprise 6.0, when a volume-based encryption policy is enabled in conjunction with a user-defined key, does not properly block use of exFAT USB flash drives, which makes it easier for local users to bypass intended access restrictions and copy sensitive information to a drive via multiple removal and reattach operations.

Affected products

• Sophos Safeguard Enterprise: version 6.0 only

Published 2012-08-29. Last modified 2026-06-16.