CVE-2021-25265

CVE-2021-25265: vulnerability in Sophos Connect Client

Published · Updated

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 2.0%
exploitation probability
2.0%top 19% of all CVEs
observed exploitation
nono source reports it
A malicious website could execute code remotely in Sophos Connect Client before version 2.1.
Affected products
Sophos · Sophos Connect Client
Related CVEs — Sophos Connect Client

In the same product, most dangerous first.

CVE-2022-48309MEDIUMCVE-2022-48309EPSS 0.3%CVE-2022-4901LOWCVE-2022-4901EPSS 0.3%CVE-2022-48310MEDIUMCVE-2022-48310EPSS 0.1%
References
https://community.sophos.com/b/security-bloghttps://community.sophos.com/b/security-blog/posts/resolved-rce-in-sophos-connect-client-for-windows-cve-2021-25265