CVSS 3.1
4.4 mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:HCVE-2021-25269
Medium (4.4) in sophos. EPSS 0.3% chance of exploitation in the next 30 days.
A local administrator could prevent the HMPA service from starting despite tamper protection using an unquoted service path vulnerability in the HMPA component of Sophos Intercept X Advanced and Sophos Intercept X Advanced for Server before version 2.0.23, as well as Sophos Exploit Prevention before version 3.8.3.
Severity
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 16% of CVEs (scores of 2026-11-01)
- CWE
- CWE-428
- Published
- Modified
- Record from
- the NVD, synced
Affected
- sophos:exploit_prevention
- sophos:intercept_x_endpoint
- sophos:intercept_x_for_server