| Package | Affected versions | Patched versions |
|---|---|---|
| disk encryption | = 5.50.0= 5.50.1= 5.50.8 | |
| safeguard easy device encryption client | = 5.50.0= 5.50.1= 5.50.8 | |
| safeguard enterprise device encryption | = 5.35.0= 5.35.1= 5.35.2= 5.35.3= 5.40.0= 5.50.0= 5.50.1= 5.50.8= 5.6 |
Sophos SafeGuard Enterprise Device Encryption 5.x through 5.50.8.13, Sophos SafeGuard Easy Device Encryption Client 5.50.x, and Sophos Disk Encryption 5.50.x have a delay before removal of (1) out-of-date credentials and (2) invalid credentials, which allows physically proximate attackers to defeat the full-disk encryption feature by leveraging knowledge of these credentials.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free