Sophos Endpoint Protection vulnerabilities

CVE-2018-9233 [HIGH] CWE-916 CVE-2018-9233: Sophos Endpoint Protection 10.7 uses an unsalted SHA-1 hash for password storage in %PROGRAMDATA%\So Sophos Endpoint Protection 10.7 uses an unsalted SHA-1 hash for password storage in %PROGRAMDATA%\Sophos\Sophos Anti-Virus\Config\machine.xml, which makes it easier for attackers to determine a cleartext password, and subsequently choose unsafe malware settings, via rainbow tables or other approaches.

CVE-2018-4863 [MEDIUM] CWE-254 CVE-2018-4863: Sophos Endpoint Protection 10.7 allows local users to bypass an intended tamper protection mechanism Sophos Endpoint Protection 10.7 allows local users to bypass an intended tamper protection mechanism by deleting the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Sophos Endpoint Defense\ registry key.

CVE-2020-9363 [HIGH] CWE-436 CVE-2020-9363: The Sophos AV parsing engine before 2020-01-14 allows virus-detection bypass via a crafted ZIP archi The Sophos AV parsing engine before 2020-01-14 allows virus-detection bypass via a crafted ZIP archive. This affects Endpoint Protection, Cloud Optix, Mobile, Intercept X Endpoint, Intercept X for Server, and Secure Web Gateway. NOTE: the vendor feels that this does not apply to endpoint-protection products because the virus would be detected upon extra