7.2
CVSSv2

CVE-2018-6853

Published: 09/07/2018 Updated: 03/10/2019
CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9
CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8
VMScore: 642
Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

Sophos SafeGuard Enterprise prior to 8.00.5, SafeGuard Easy prior to 7.00.3, and SafeGuard LAN Crypt prior to 3.95.2 are vulnerable to Local Privilege Escalation via IOCTL 0x80206024. By crafting an input buffer we can control the execution path to the point where a global variable will be written to a user controlled address. We can take advantage of this condition to zero-out the pointer to the security descriptor in the object header of a privileged process or modify the security descriptor itself and run code in the context of a process running as SYSTEM.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

sophos safeguard lan crypt client 3.95.1

sophos safeguard enterprise client 7.00

sophos safeguard enterprise client 6.10

sophos safeguard enterprise client 5.60.3

sophos safeguard enterprise client 6.00

sophos safeguard lan crypt client 3.90.1

sophos safeguard easy device encryption client 6.00

sophos safeguard easy device encryption client 7.00

sophos safeguard lan crypt client 3.90.2

sophos safeguard enterprise client 8.00

sophos safeguard enterprise client 6.00.1

sophos safeguard easy device encryption client 6.10

Recent Articles

Sophos SafeGuard anything but – thanks to 7 serious security bugs
The Register • Shaun Nichols in San Francisco • 26 Jun 2018

Your antimalware tools can get malware too, so get updating Microsoft downplays alarm over Windows Defender 'flaw'

Companies running Sophos security clients will want to update their software following the disclosure of seven privilege escalation flaws in the security suite. Sophos says its SafeGuard Enterprise Client, LAN Crypt client and Easy software on Windows are all vulnerable to the bugs, which can be exploited by an attacker to run code with System (aka administrator) level privileges. With these privileges, miscreants and malware can commandeer the entire machine. In other words, the software you us...