Sophos IPSec Client Access Control Error Vulnerability

Sophos IPSec Client is a VPN client application. An access control error vulnerability exists in Sophos IPSec Client version 11.04 NCPSecure Entry Client version 10.11 r32792. The vulnerability arises from the network system or product not properly restricting access to resources from unauthorize...

PT-2019-8172

Name of the Vulnerable Software and Affected Versions Sophos IPSec Client version 11.04 NCP Secure Entry Client version 10.11 r32792 Description A vulnerability in the software update feature of the VPN client allows a man-in-the-middle MITM or man-on-the-side MOTS attacker to execute arbitrary,...

CVE-2017-17023: Insufficient Verification of Data Authenticity

The Sophos UTM VPN endpoint interacts with client software provided by NPC Engineering www.ncp-e.com. The affected client software, "Sophos IPSec Client" 11.04 is a rebranded version of NCP "Secure Entry Client" 10.11 r32792. A vulnerability in the software update feature of the VPN client allows...