CVE-2018-4863

Description

Sophos Endpoint Protection 10.7 allows local users to bypass an intended tamper protection mechanism by deleting the HKEY_LOCAL_MACHINESYSTEMCurrentControlSetservicesSophos Endpoint Defense registry key.

Risk Information

Base Score

5.5

MODERATE

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS Score

Exploitation Probability

0.038

Associated Vulnerability

Vulnerability	OS Platform
Update Symantec Endpoint Protection (x64) 10.7 to latest version	Windows
Update Symantec Endpoint Protection 10.7 to latest version	Windows
Vulnerabilities CVE-2018-4863 ,CVE-2018-9233 ,CVE-2020-9363 are affected in endpoint_protection 10.7	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234