CVE-2021-25269 - Sophos Exploit Prevention, Sophos Intercept X Endpoint and Sophos Intercept X For Server

A local administrator could prevent the HMPA service from starting despite tamper protection using an unquoted service path vulnerability in the HMPA component of Sophos Intercept X Advanced and Sophos Intercept X Advanced for Server before version 2.0.23, as well as Sophos Exploit Prevention before version 3.8.3.

Affected software

Reference links