Sophos Safeguard Enterprise Device Encryption vulnerabilities

1 vulnerability

Known vulnerabilities in Sophos Safeguard Enterprise Device Encryption, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.9CVE-2011-5117sophosdisk_encryption+2
EPSS score
0.34%
Sophos SafeGuard Enterprise Device Encryption 5.x through 5.50.8.13, Sophos SafeGuard Easy Device Encryption Client 5.50.x, and Sophos Disk Encryption 5.50.x have a delay before removal of (1) out-of-date credentials and (2) invalid credentials, which allows physically proximate attackers to defeat the full-disk encryption feature by leveraging knowledge of these credentials.