PT-2020-20611
CVE-2020-9363
·
Published
2020-02-24
·
Updated
2022-04-18
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Sophos Endpoint Protection versions prior to 2020-01-14
Sophos Cloud Optix versions prior to 2020-01-14
Sophos Mobile versions prior to 2020-01-14
Sophos Intercept X Endpoint versions prior to 2020-01-14
Sophos Intercept X for Server versions prior to 2020-01-14
Sophos Secure Web Gateway versions prior to 2020-01-14
Description
The issue allows virus-detection bypass via a crafted ZIP archive. It affects various Sophos products.
Recommendations
For Sophos Endpoint Protection versions prior to 2020-01-14, update to a version released after 2020-01-14.
For Sophos Cloud Optix versions prior to 2020-01-14, update to a version released after 2020-01-14.
For Sophos Mobile versions prior to 2020-01-14, update to a version released after 2020-01-14.
For Sophos Intercept X Endpoint versions prior to 2020-01-14, update to a version released after 2020-01-14.
For Sophos Intercept X for Server versions prior to 2020-01-14, update to a version released after 2020-01-14.
For Sophos Secure Web Gateway versions prior to 2020-01-14, update to a version released after 2020-01-14.
Found an issue in the description? Have something to add? Feel free to write us 👾