Vulnerability in Sophos Hitmanpro.alert

CVE-2021-25270

A local attacker could execute arbitrary code with administrator privileges in HitmanPro.Alert before version Build 901.

EPSS: 0.003 (17.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.7 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Sophos Hitmanpro.alert — versions unspecified

References

security-alert@sophos.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2021-25270?: CVE-2021-25270 is a medium-severity vulnerability in Sophos Hitmanpro.alert. CVSS score: 6.7/10. Published 2021-10-08.
How severe is CVE-2021-25270?: Medium severity. CVSS v3 base score is 6.7 out of 10.