CVE-2018-6851 is a Local Privilege Escalation vulnerability affecting Sophos SafeGuard Enterprise, SafeGuard Easy, and SafeGuard LAN Crypt client software versions prior to their respective patches. An attacker can exploit this by crafting an input buffer to an IOCTL, allowing them to write a null DWORD to a controlled memory address. This enables manipulation of security descriptors for privileged processes, leading to arbitrary code execution as SYSTEM. Rated 7.8 HIGH on CVSS, this vulnerability has a low attack complexity and requires local access, but can result in full compromise of confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code, the vulnerability has received some community discussion and media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
6.00CPE matchmatch criteria | cpe:2.3:a:sophos:safeguard_easy_device_encryption_client:6.00:*:*:*:*:*:*:* | ||
6.10CPE matchmatch criteria | cpe:2.3:a:sophos:safeguard_easy_device_encryption_client:6.10:*:*:*:*:*:*:* | ||
7.00CPE matchmatch criteria | cpe:2.3:a:sophos:safeguard_easy_device_encryption_client:7.00:*:*:*:*:*:*:* | ||
5.60.3CPE matchmatch criteria | cpe:2.3:a:sophos:safeguard_enterprise_client:5.60.3:vs-nfd:*:*:*:*:*:* | ||
6.00CPE matchmatch criteria | cpe:2.3:a:sophos:safeguard_enterprise_client:6.00:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.