CVE-2021-25269
Quick assessment
Affected
Sophos Intercept X Advanced
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Sophos Intercept X Advanced是英国Sophos公司的Intercept X 适用于在 Windows 和 macOS 上运行的设备。Intercept X 是业界最全面的端点保护，包括强大的端点检测和响应 (EDR) 和扩展检测和响应 (XDR) 选项。 Sophos Intercept X Advanced 存在安全漏洞，该漏洞源于软件当中针对路径的代码实现存在问题，本地管理员可以使用HMPA组件中的未引用的服务路径漏洞来阻止HMPA服务启动。
Possible ATT&CK Techniques 1 AI
T1543.002 · Systemd Service
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2021-25269
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A local administrator could prevent the HMPA service from starting despite tamper protection using an unquoted service path vulnerability in the HMPA component of Sophos Intercept X Advanced and Sophos Intercept X Advanced for Server before version 2.0.23, as well as Sophos Exploit Prevention before version 3.8.3.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Sophos Intercept X Advanced 代码问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Sophos Intercept X Advanced是英国Sophos公司的Intercept X 适用于在 Windows 和 macOS 上运行的设备。Intercept X 是业界最全面的端点保护，包括强大的端点检测和响应 (EDR) 和扩展检测和响应 (XDR) 选项。 Sophos Intercept X Advanced 存在安全漏洞，该漏洞源于软件当中针对路径的代码实现存在问题，本地管理员可以使用HMPA组件中的未引用的服务路径漏洞来阻止HMPA服务启动。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Sophos | Intercept X Advanced | unspecified ~ 2.0.23 | - |
|
| Sophos | Intercept X Advanced for Server | unspecified ~ 2.0.23 | - |
|
| Sophos | Sophos Exploit Prevention | unspecified ~ 3.8.3 | - |
|
II. Public POCs for CVE-2021-25269
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-25269
请登录查看更多情报信息。
Other References for CVE-2021-25269 (1)
IV. Related Vulnerabilities
V. Comments for CVE-2021-25269
No comments yet