Sophos Safeguard Lan Crypt Client vulnerabilities

7 CVEs affecting Sophos Safeguard Lan Crypt Client, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-6857, published 2018-07-09.

More from Sophos.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-6857, published 2018-07-09. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. Sophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy before 7.00.3, and SafeGuard LAN Crypt before 3.95.2 are vulnerable to Local Privilege Escalation via IOCTL 0x802022E0. By crafting an input…
• CVE-2018-6856, published 2018-07-09. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. Sophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy before 7.00.3, and SafeGuard LAN Crypt before 3.95.2 are vulnerable to Local Privilege Escalation via IOCTL 0x8020601C. By crafting an input…
• CVE-2018-6853, published 2018-07-09. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. Sophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy before 7.00.3, and SafeGuard LAN Crypt before 3.95.2 are vulnerable to Local Privilege Escalation via IOCTL 0x80206024. By crafting an input…
• CVE-2018-6852, published 2018-07-09. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. Sophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy before 7.00.3, and SafeGuard LAN Crypt before 3.95.2 are vulnerable to Local Privilege Escalation via IOCTL 0x80202298. By crafting an input…
• CVE-2018-6851, published 2018-07-09. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. Sophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy before 7.00.3, and SafeGuard LAN Crypt before 3.95.2 are vulnerable to Local Privilege Escalation via IOCTL 0x80206040. By crafting an input…
• CVE-2018-6854, published 2018-07-09. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. Sophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy before 7.00.3, and SafeGuard LAN Crypt before 3.95.2 are vulnerable to Local Privilege Escalation via multiple IOCTLs, e.g., 0x8810200B,…
• CVE-2018-6855, published 2018-07-09. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. Sophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy before 7.00.3, and SafeGuard LAN Crypt before 3.95.2 are vulnerable to Local Privilege Escalation via IOCTL 0x80202014. By crafting an input…