medium5.5Public exploit code
CVE-2018-4863
Sophos Endpoint Protection 10.7 allows local users to bypass an intended tamper protection mechanism by deleting the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSe…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Sophos Endpoint Protection 10.7 - Tamper-Protection Bypass2018-04-06 · local · windows
Impact
Sophos Endpoint Protection 10.7 allows local users to bypass an intended tamper protection mechanism by deleting the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Sophos Endpoint Defense\ registry key.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sophos | Endpoint Protection | Version 10.7 |