Sophos Endpoint Protection vulnerabilities

3 CVEs affecting Sophos Endpoint Protection, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-9363, published 2020-02-24.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-9233, published 2018-04-05. High severity, CVSS 7.8. EPSS: 1.7% chance of exploitation in the next 30 days. Sophos Endpoint Protection 10.7 uses an unsalted SHA-1 hash for password storage in %PROGRAMDATA%\Sophos\Sophos Anti-Virus\Config\machine.xml, which makes it easier for attackers to determine a…
CVE-2018-4863, published 2018-04-05. Medium severity, CVSS 5.5. EPSS: 1.2% chance of exploitation in the next 30 days. Sophos Endpoint Protection 10.7 allows local users to bypass an intended tamper protection mechanism by deleting the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Sophos Endpoint Defense\…
CVE-2020-9363, published 2020-02-24. High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days. The Sophos AV parsing engine before 2020-01-14 allows virus-detection bypass via a crafted ZIP archive. This affects Endpoint Protection, Cloud Optix, Mobile, Intercept X Endpoint, Intercept X for…