CVE-2018-4863

5.5MEDIUM

Key Information:

Vendor: Sophos
Status: Endpoint Protection
Vendor: CVE Published:; 5 April 2018

Summary

Sophos Endpoint Protection 10.7 allows local users to bypass an intended tamper protection mechanism by deleting the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Sophos Endpoint Defense\ registry key.

References

https://www.exploit-db.com/exploits/44410/

exploitx_refsource_EXPLOIT-DB

http://hyp3rlinx.altervista.org/advisories/SOPHOS-ENDPOIN...

x_refsource_MISC

http://seclists.org/fulldisclosure/2018/Apr/6

mailing-listx_refsource_FULLDISC

CVSS V3.1

Score:

5.5

Severity:

MEDIUM

Confidentiality:

None

Integrity:

High

Availability:

None

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published
Apr 5, 2018
Vulnerability Reserved
Jan 3, 2018

Collectors

NVD DatabaseMitre Database