CVE-2018-4863

CVE-2018-4863 affects Sophos Endpoint Protection 10.7. A local user can bypass the product’s tamper protection by deleting the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Sophos Endpoint Defense (TamperProtection/SEDEnabled). Evidence across sources (NVD entry, CNVD/PRION/CV...

CVE-2018-9233

Sophos Endpoint Protection – Control Panel v10.7 on Windows/macOS is affected by CVE-2018-9233 due to unsalted SHA-1 password storage in machine.xml. The root cause is weak cryptography used for credentials, enabling attackers with local access to recover plaintext passwords (e.g., via rainbow ta...

CVE-2020-9363

The CVE entry CVE-2020-9363 concerns the Sophos AV parsing engine prior to 2020-01-14, where a crafted ZIP archive can bypass virus detection. Affected products include Sophos Endpoint Protection, Cloud Optix, Mobile, Intercept X Endpoint, Intercept X for Server, and Secure Web Gateway. The under...