High · 8.8 CVE-2024-13972 EUVD-2024-54801GHSA-mv32-9mh3-q74p

A vulnerability related to registry permissions in the Intercept X for Windows updater prior to Core Agent version 2024.3.2 can lead to a l…

Published Jul 17, 2025 · Updated Aug 3, 2025 · Assigned by Sophos

Vendor: Sophos Product: Sophos Intercept X for Windows Core Agent Platform: Windows Category: Network devices

Description

A vulnerability related to registry permissions in the Intercept X for Windows updater prior to Core Agent version 2024.3.2 can lead to a local user gaining SYSTEM level privileges during a product upgrade.

Affected products

Vendor	Product	Affected	Fixed
Sophos	Sophos Intercept X for Windows Core Agent	< 2024.3.2	2024.3.2

References

https://www.sophos.com/en-us/security-advisories/sophos-sa-20250717-cix-lpe