CVE-2021-25265

Mô tả

Tham khảo

• community.sophos.com/b/security-blog · Vendor Advisory
• community.sophos.com/b/security-blog/posts/resolved-rce-in-sophos-connect-client-for-windows-cve-2021-25265 · Patch

Lỗ hổng khác của connect

• CVE-2022-4901TRUNG BÌNH 6.1Multiple stored XSS vulnerabilities in Sophos Connect versions older than 2.2.90 allow Javascript code to run in the local UI via a maliciou…
• CVE-2022-48310TRUNG BÌNH 5.5An information disclosure vulnerability allows sensitive key material to be included in technical support archives in Sophos Connect version…
• CVE-2022-48309TRUNG BÌNH 4.3A CSRF vulnerability allows malicious websites to retrieve logs and technical support archives in Sophos Connect versions older than 2.2.90.