CVE-2024-8885

CVSS V2 None CVSS V3 None

Description

A local privilege escalation vulnerability in Sophos Intercept X for Windows with Central Device Encryption 2024.2.0 and older allows writing of arbitrary files.

Overview

CVE ID
CVE-2024-8885

Assigner
Sophos

Vulnerability Status
PUBLISHED

Published Version
2024-10-02T12:25:18.831Z

Last Modified Date
2024-10-02T14:24:29.783Z

Weakness Enumerations

CWE	URL
CWE-1104	http://cwe.mitre.org/data/definitions/1104.html
CWE-502	http://cwe.mitre.org/data/definitions/502.html

References

Reference URL	Reference Tags
https://www.sophos.com/en-us/security-advisories/sophos-sa-20241002-cde-lpe

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-8885
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-8885

History

Created	Old Value	New Value	Data Type	Notes
2024-10-06 23:16:19				Added to TrackCVE