PT-2022-10552 · Sophos · Sophos Ssl Vpn Client

Published 2022-03-07 · Updated 2022-07-12 · CVE-2021-36809

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Name of the Vulnerable Software and Affected Versions Sophos SSL VPN client (affected versions not specified)

Description A local attacker can overwrite arbitrary files on the system with VPN client logs using administrator privileges, potentially resulting in a denial of service and data loss.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2021-36809

Affected Products

Sophos Ssl Vpn Client

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2021-36809 · Security Note
• https://sophos.com/en-us/security-advisories/sophos-sa-20220303-sslvpn-local-dos · Vendor Advisory
• https://t.me/cibsecurity/38523 · Telegram Post
• https://t.me/cvenotify/27864 · Telegram Post