EUVD-2014-1294

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Sophos Anti-Virus engine lacks ACL for objects, allowing local users to bypass protection and trigger issues

Reporter	Title	Published	Views	Family All 7
CVE	CVE-2014-1213	10 Feb 201423:00	–	cve
Cvelist	CVE-2014-1213	10 Feb 201423:00	–	cvelist
NVD	CVE-2014-1213	10 Feb 201423:55	–	nvd
Prion	Authentication flaw	10 Feb 201423:55	–	prion
securityvulns	CVE-2014-1213 - Denial of Service in Sophos Anti Virus	10 Feb 201400:00	–	securityvulns
securityvulns	Sophos antivirus weak permissions	10 Feb 201400:00	–	securityvulns
Tenable Nessus	Sophos Anti-Virus Engine < 3.50.1 System Objects DoS	5 Feb 201400:00	–	nessus

[
  {
    "enisaIdVendor": [
      {
        "id": "eb1aeda5-932d-3f45-9858-0dbeb7471fb0",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "fedc2342-b8d1-320c-a965-d66a5685296b",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
sophos	www.sophos.com/en-us/support/knowledgebase/2300/7200/1031/120401.aspx
packetstormsecurity	www.packetstormsecurity.com/files/125024/Sophos-Anti-Virus-Denial-Of-Service.html
securityfocus	www.securityfocus.com/archive/1/530915/100/0/threaded
seclists	www.seclists.org/fulldisclosure/2014/Feb/1
osvdb	www.osvdb.org/102762
securitytracker	www.securitytracker.com/id/1029713
portcullis-security	www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-1213/
securityfocus	www.securityfocus.com/bid/65286
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

6.4Medium risk

Vulners AI Score6.4

CVSS 25.6

EPSS0.00082