Skip to main content

Sophos Tester

2 CVEs product

Monthly

CVE-2018-6319 Feb 02, 21:29 MEDIUM This Month

In Sophos Tester Tool 3.2.0.7 Beta, the driver accepts a special DeviceIoControl code that doesn't check its argument. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Denial Of Service Null Pointer Dereference Sophos Sophos Tester
NVD
CVSS 3.0
5.5
EPSS
0.3%
CVE-2018-6318 Feb 02, 21:29 HIGH This Week

In Sophos Tester Tool 3.2.0.7 Beta, the driver loads (in the context of the application used to test an exploit or ransomware) the DLL using a payload that runs from NTDLL.DLL (so, it's run in. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Sophos Sophos Tester
NVD
CVSS 3.0
7.8
EPSS
1.1%
EPSS 0% CVSS 5.5
MEDIUM This Month

In Sophos Tester Tool 3.2.0.7 Beta, the driver accepts a special DeviceIoControl code that doesn't check its argument. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Denial Of Service Null Pointer Dereference Sophos +1
NVD
EPSS 1% CVSS 7.8
HIGH This Week

In Sophos Tester Tool 3.2.0.7 Beta, the driver loads (in the context of the application used to test an exploit or ransomware) the DLL using a payload that runs from NTDLL.DLL (so, it's run in. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Sophos Sophos Tester
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy