CVE-2021-25269
Medium
Description
A local administrator could prevent the HMPA service from starting despite tamper protection using an unquoted service path vulnerability in the HMPA component of Sophos Intercept X Advanced and Sophos Intercept X Advanced for Server before version 2.0.23, as well as Sophos Exploit Prevention before version 3.8.3.
SeverityMedium
CVSS4.4
Exploit probability—
Product
Sophos Exploit Prevention
PublishedNov 26, 2021
First seenNov 26, 2021
How to fix
Update
- sophos exploit_prevention3.8.3 or later
- sophos intercept_x_endpoint2.0.23 or later
- sophos intercept_x_for_server2.0.23 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sophos exploit_prevention | v < 3.8.3 | 3.8.3 |
| sophos intercept_x_endpoint | v < 2.0.23 | 2.0.23 |
| sophos intercept_x_for_server | v < 2.0.23 | 2.0.23 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.