Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

safeguard enterprise device encryption vulnerabilities and exploits

(subscribe to this query)
6.9
CVSSv2
CVE-2011-5117
Sophos SafeGuard Enterprise Device Encryption 5.x up to and including 5.50.8.13, Sophos SafeGuard Easy Device Encryption Client 5.50.x, and Sophos Disk Encryption 5.50.x have a delay before removal of (1) out-of-date credentials and (2) invalid credentials, which allows physicall...
Sophos Safeguard Enterprise Device Encryption 5.50.8Sophos Safeguard Enterprise Device Encryption 5.50.0Sophos Safeguard Enterprise Device Encryption 5.40.0Sophos Safeguard Enterprise Device Encryption 5.35.3Sophos Safeguard Enterprise Device Encryption 5.35.2Sophos Safeguard Enterprise Device Encryption 5.35.1Sophos Safeguard Enterprise Device Encryption 5.6Sophos Safeguard Enterprise Device Encryption 5.50.1Sophos Safeguard Enterprise Device Encryption 5.35.0Sophos Safeguard Easy Device Encryption Client 5.50.1Sophos Safeguard Easy Device Encryption Client 5.50.8Sophos Safeguard Easy Device Encryption Client 5.50.0Sophos Disk Encryption 5.50.0Sophos Disk Encryption 5.50.1Sophos Disk Encryption 5.50.8
7.2
CVSSv2
CVE-2018-6852
Sophos SafeGuard Enterprise prior to 8.00.5, SafeGuard Easy prior to 7.00.3, and SafeGuard LAN Crypt prior to 3.95.2 are vulnerable to Local Privilege Escalation via IOCTL 0x80202298. By crafting an input buffer we can control the execution path to the point where the nt!memset f...
Sophos Safeguard Easy Device Encryption Client 6.10Sophos Safeguard Easy Device Encryption Client 7.00Sophos Safeguard Lan Crypt Client 3.90.2Sophos Safeguard Lan Crypt Client 3.90.1Sophos Safeguard Enterprise Client 8.00Sophos Safeguard Enterprise Client 7.00Sophos Safeguard Enterprise Client 6.10Sophos Safeguard Lan Crypt Client 3.95.1Sophos Safeguard Enterprise Client 6.00Sophos Safeguard Easy Device Encryption Client 6.00Sophos Safeguard Enterprise Client 5.60.3Sophos Safeguard Enterprise Client 6.00.1
7.2
CVSSv2
CVE-2018-6856
Sophos SafeGuard Enterprise prior to 8.00.5, SafeGuard Easy prior to 7.00.3, and SafeGuard LAN Crypt prior to 3.95.2 are vulnerable to Local Privilege Escalation via IOCTL 0x8020601C. By crafting an input buffer we can control the execution path to the point where a global variab...
Sophos Safeguard Lan Crypt Client 3.90.2Sophos Safeguard Lan Crypt Client 3.90.1Sophos Safeguard Enterprise Client 8.00Sophos Safeguard Enterprise Client 7.00Sophos Safeguard Easy Device Encryption Client 6.10Sophos Safeguard Easy Device Encryption Client 7.00Sophos Safeguard Lan Crypt Client 3.95.1Sophos Safeguard Enterprise Client 5.60.3Sophos Safeguard Enterprise Client 6.00.1Sophos Safeguard Enterprise Client 6.10Sophos Safeguard Enterprise Client 6.00Sophos Safeguard Easy Device Encryption Client 6.00
7.2
CVSSv2
CVE-2018-6855
Sophos SafeGuard Enterprise prior to 8.00.5, SafeGuard Easy prior to 7.00.3, and SafeGuard LAN Crypt prior to 3.95.2 are vulnerable to Local Privilege Escalation via IOCTL 0x80202014. By crafting an input buffer we can control the execution path to the point where the constant 0x...
Sophos Safeguard Lan Crypt Client 3.95.1Sophos Safeguard Lan Crypt Client 3.90.2Sophos Safeguard Lan Crypt Client 3.90.1Sophos Safeguard Enterprise Client 6.00Sophos Safeguard Enterprise Client 6.00.1Sophos Safeguard Easy Device Encryption Client 6.00Sophos Safeguard Easy Device Encryption Client 6.10Sophos Safeguard Enterprise Client 7.00Sophos Safeguard Enterprise Client 5.60.3Sophos Safeguard Easy Device Encryption Client 7.00Sophos Safeguard Enterprise Client 8.00Sophos Safeguard Enterprise Client 6.10
7.2
CVSSv2
CVE-2018-6851
Sophos SafeGuard Enterprise prior to 8.00.5, SafeGuard Easy prior to 7.00.3, and SafeGuard LAN Crypt prior to 3.95.2 are vulnerable to Local Privilege Escalation via IOCTL 0x80206040. By crafting an input buffer we can control the execution path to the point where the constant DW...
Sophos Safeguard Enterprise Client 6.00Sophos Safeguard Enterprise Client 6.00.1Sophos Safeguard Easy Device Encryption Client 6.00Sophos Safeguard Easy Device Encryption Client 6.10Sophos Safeguard Lan Crypt Client 3.95.1Sophos Safeguard Lan Crypt Client 3.90.2Sophos Safeguard Lan Crypt Client 3.90.1Sophos Safeguard Enterprise Client 8.00Sophos Safeguard Enterprise Client 6.10Sophos Safeguard Enterprise Client 7.00Sophos Safeguard Enterprise Client 5.60.3Sophos Safeguard Easy Device Encryption Client 7.00
7.2
CVSSv2
CVE-2018-6853
Sophos SafeGuard Enterprise prior to 8.00.5, SafeGuard Easy prior to 7.00.3, and SafeGuard LAN Crypt prior to 3.95.2 are vulnerable to Local Privilege Escalation via IOCTL 0x80206024. By crafting an input buffer we can control the execution path to the point where a global variab...
Sophos Safeguard Lan Crypt Client 3.95.1Sophos Safeguard Enterprise Client 7.00Sophos Safeguard Enterprise Client 6.10Sophos Safeguard Enterprise Client 5.60.3Sophos Safeguard Enterprise Client 6.00Sophos Safeguard Lan Crypt Client 3.90.1Sophos Safeguard Easy Device Encryption Client 6.00Sophos Safeguard Easy Device Encryption Client 7.00Sophos Safeguard Lan Crypt Client 3.90.2Sophos Safeguard Enterprise Client 8.00Sophos Safeguard Enterprise Client 6.00.1Sophos Safeguard Easy Device Encryption Client 6.10
7.2
CVSSv2
CVE-2018-6854
Sophos SafeGuard Enterprise prior to 8.00.5, SafeGuard Easy prior to 7.00.3, and SafeGuard LAN Crypt prior to 3.95.2 are vulnerable to Local Privilege Escalation via multiple IOCTLs, e.g., 0x8810200B, 0x8810200F, 0x8810201B, 0x8810201F, 0x8810202B, 0x8810202F, 0x8810203F, 0x88102...
Sophos Safeguard Enterprise Client 7.00Sophos Safeguard Enterprise Client 6.10Sophos Safeguard Enterprise Client 5.60.3Sophos Safeguard Enterprise Client 6.00Sophos Safeguard Enterprise Client 6.00.1Sophos Safeguard Lan Crypt Client 3.95.1Sophos Safeguard Lan Crypt Client 3.90.2Sophos Safeguard Enterprise Client 8.00Sophos Safeguard Easy Device Encryption Client 6.10Sophos Safeguard Lan Crypt Client 3.90.1Sophos Safeguard Easy Device Encryption Client 6.00Sophos Safeguard Easy Device Encryption Client 7.00
7.2
CVSSv2
CVE-2018-6857
Sophos SafeGuard Enterprise prior to 8.00.5, SafeGuard Easy prior to 7.00.3, and SafeGuard LAN Crypt prior to 3.95.2 are vulnerable to Local Privilege Escalation via IOCTL 0x802022E0. By crafting an input buffer we can control the execution path to the point where the constant 0x...
Sophos Safeguard Lan Crypt Client 3.90.1Sophos Safeguard Enterprise Client 8.00Sophos Safeguard Enterprise Client 7.00Sophos Safeguard Enterprise Client 6.10Sophos Safeguard Easy Device Encryption Client 6.10Sophos Safeguard Easy Device Encryption Client 7.00Sophos Safeguard Lan Crypt Client 3.95.1Sophos Safeguard Lan Crypt Client 3.90.2Sophos Safeguard Enterprise Client 5.60.3Sophos Safeguard Enterprise Client 6.00.1Sophos Safeguard Enterprise Client 6.00Sophos Safeguard Easy Device Encryption Client 6.00
3.3
CVSSv2
CVE-2012-4736
The Device Encryption Client component in Sophos SafeGuard Enterprise 6.0, when a volume-based encryption policy is enabled in conjunction with a user-defined key, does not properly block use of exFAT USB flash drives, which makes it easier for local users to bypass intended acce...
Sophos Safeguard Enterprise 6.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionfirmwareCVE-2006-4304CVE-2024-32878CVE-2024-31502XSSCVE-2024-3059CVE-2024-33692CVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook