CVE-2018-4863 Sophos Endpoint Protection 10.7 allows local users to bypass an intended tamper protection mechanism by deleting the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Sophos Endpoint Defense\ regis...
MediumCVSS 5.5
EPSS 1.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Sophos Endpoint Protection 10.7 allows local users to bypass an intended tamper protection mechanism by deleting the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Sophos Endpoint Defense\ registry key.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sophos endpoint protection | = 10.7 | No fix listed |
References
- hyp3rlinx.altervista.org exploit third-party-advisory
- 20180403 CVE-2018-4863 Sophos Endpoint Protection v10.7 / Tamper Protection Bypass exploit mailing-list third-party-advisory
- 44410 exploit third-party-advisory vdb-entry