Severity by source
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
1DescriptionNVD
In multiple versions of Sophos Endpoint products for MacOS, a local attacker could execute arbitrary code with administrator privileges.
AnalysisAI
In multiple versions of Sophos Endpoint products for MacOS, a local attacker could execute arbitrary code with administrator privileges. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.
Technical ContextAI
In multiple versions of Sophos Endpoint products for MacOS, a local attacker could execute arbitrary code with administrator privileges. Affected products include: Sophos Home, Sophos Intercept X.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
Evoko Home devices 1.31 through 1.37 allow remote attackers to obtain sensitive information (such as usernames and passw
Evoko Home 1.31 devices provide different error messages for failed login requests depending on whether the username is
Govee Home app has unprotected access to WebView component which can be opened by any app on the device. Rated high seve
ECOVACS HOME mobile app plugins for specific robots do not properly validate TLS certificates. Rated critical severity (
The cloud service used by ECOVACS robot lawnmowers and vacuums allows authenticated attackers to bypass the PIN entry re
Share
External POC / Exploit Code
Leaving vuln.today