High · 8.8 CVE-2024-8885 EUVD-2024-49456GHSA-g2wp-r2jm-2m5f

A local privilege escalation vulnerability in Sophos Intercept X for Windows with Central Device Encryption 2024.2.0 and older allows writi…

Published Oct 2, 2024 · Updated Oct 2, 2024 · Assigned by Sophos

Vendor: Sophos Product: Sophos Intercept X Category: Network devices

Description

A local privilege escalation vulnerability in Sophos Intercept X for Windows with Central Device Encryption 2024.2.0 and older allows writing of arbitrary files.

Affected products

Vendor	Product	Affected	Fixed
Sophos	Sophos Intercept X	< 2024.2.0	2024.2.0

References

https://www.sophos.com/en-us/security-advisories/sophos-sa-20241002-cde-lpe