CVE-2011-5117
Medium
Description
Sophos SafeGuard Enterprise Device Encryption 5.x through 5.50.8.13, Sophos SafeGuard Easy Device Encryption Client 5.50.x, and Sophos Disk Encryption 5.50.x have a delay before removal of (1) out-of-date credentials and (2) invalid credentials, which allows physically proximate attackers to defeat the full-disk encryption feature by leveraging knowledge of these credentials.
SeverityMedium
CVSS6.9
Exploit probability—
Product
Sophos Safeguard Enterprise Device Encryption
PublishedAug 24, 2012
First seenAug 24, 2012
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sophos safeguard_enterprise_device_encryption | 5.6, 5.35.0, 5.35.1, 5.35.2, 5.35.3, 5.40.0, 5.50.0, 5.50.1, 5.50.8 | — |
| sophos safeguard_easy_device_encryption_client | 5.50.0, 5.50.1, 5.50.8 | — |
| sophos disk_encryption | 5.50.0, 5.50.1, 5.50.8 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.