JVN#63940326: Sophos Disk Encryption vulnerable to authentication bypass

Sophos Disk Encryption is a product to encrypt hard disk data on Windows PC. By default, Window requires logon authentication when the PC wakes up from hibernation or sleep mode. When Sophos Disk Encryption is installed, no authentication is required before operating the PC.

Impact

An unauthenticated attacker may compromise the computer and gain control over it.

Solution

Update the Software
Update Sophos Enterprise Console (SEC) to 5.2.2 or later version according to the information provided by the developer.

Apply****the workaround
The following workaround may mitigate the affects of this vulnerability.

• Edit Group policy or Local Group Policy depending on the Windows network environment (domain / workgroup).

For more information, please refer to the developer’s website.

Products Affected

• Sophos Disk Encryption 5.61 managed through Sophos Enterprise Console (SEC) Ver. 5.1, 5.2, 5.2.1 and 5.2.1R2