Unscored severity · published Aug 24, 2012
CVE-2011-5117
Sophos SafeGuard Enterprise Device Encryption 5.x through 5.50.8.13, Sophos SafeGuard Easy Device Encryption Client 5.50.x, and Sophos Disk Encryption 5.50.x have a delay before…
–
CVSS
0.3%
EPSS
No
On KEV
Description
Sophos SafeGuard Enterprise Device Encryption 5.x through 5.50.8.13, Sophos SafeGuard Easy Device Encryption Client 5.50.x, and Sophos Disk Encryption 5.50.x have a delay before removal of (1) out-of-date credentials and (2) invalid credentials, which allows physically proximate attackers to defeat the full-disk encryption feature by leveraging knowledge of these credentials.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 27% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DE
Disk Encryption · Sophos
5.50.0; 5.50.1; 5.50.8 · source: NVD
SE
Safeguard Easy Device Encryption Client · Sophos
5.50.0; 5.50.1; 5.50.8 · source: NVD
SE
Safeguard Enterprise Device Encryption · Sophos
5.6; 5.35.0; 5.35.1; 5.35.2; 5.35.3; 5.40.0; +3 more · source: NVD