CVE-2021-25269

Name of the Vulnerable Software and Affected Versions: Sophos Intercept X Advanced versions prior to 2.0.23 Sophos Intercept X Advanced for Server versions prior to 2.0.23 Sophos Exploit Prevention versions prior to 3.8.3

Description: A local administrator could exploit an unquoted service path vulnerability in the HMPA component to prevent the HMPA service from starting despite tamper protection.

Recommendations: For Sophos Intercept X Advanced versions prior to 2.0.23, update to version 2.0.23 or later. For Sophos Intercept X Advanced for Server versions prior to 2.0.23, update to version 2.0.23 or later. For Sophos Exploit Prevention versions prior to 3.8.3, update to version 3.8.3 or later.