National Vulnerability Database

National Vulnerability Database

National Vulnerability
Database

Vulnerability Change Record for CVE-2018-6851

Change History

Initial Analysis - 9/7/2018 11:40:47 AM

Action Type Old Value New Value
Changed Reference Type
http://seclists.org/fulldisclosure/2018/Jul/20 No Types Assigned
http://seclists.org/fulldisclosure/2018/Jul/20 Mailing List, Third Party Advisory
Changed Reference Type
https://community.sophos.com/kb/en-us/131934 No Types Assigned
https://community.sophos.com/kb/en-us/131934 Patch, Vendor Advisory
Changed Reference Type
https://labs.nettitude.com/blog/cve-2018-6851-to-cve-2018-6857-sophos-privilege-escalation-vulnerabilities/ No Types Assigned
https://labs.nettitude.com/blog/cve-2018-6851-to-cve-2018-6857-sophos-privilege-escalation-vulnerabilities/ Exploit, Technical Description, Third Party Advisory
Added CWE
CWE-264
Added CVSS V2
(AV:L/AC:L/Au:N/C:C/I:C/A:C)
Added CVSS V3
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Added CPE Configuration
OR
     *cpe:2.3:a:sophos:safeguard_easy_device_encryption_client:6.00:*:*:*:*:*:*:*
     *cpe:2.3:a:sophos:safeguard_easy_device_encryption_client:6.10:*:*:*:*:*:*:*
     *cpe:2.3:a:sophos:safeguard_easy_device_encryption_client:7.00:*:*:*:*:*:*:*
     *cpe:2.3:a:sophos:safeguard_enterprise_client:5.60.3:vs-nfd:*:*:*:*:*:*
     *cpe:2.3:a:sophos:safeguard_enterprise_client:6.00:*:*:*:*:*:*:*
     *cpe:2.3:a:sophos:safeguard_enterprise_client:6.00.1:*:*:*:*:*:*:*
     *cpe:2.3:a:sophos:safeguard_enterprise_client:6.10:*:*:*:*:*:*:*
     *cpe:2.3:a:sophos:safeguard_enterprise_client:7.00:*:*:*:*:*:*:*
     *cpe:2.3:a:sophos:safeguard_enterprise_client:8.00:*:*:*:*:*:*:*
     *cpe:2.3:a:sophos:safeguard_lan_crypt_client:3.90.1:ts:*:*:*:*:*:*
     *cpe:2.3:a:sophos:safeguard_lan_crypt_client:3.90.2:*:*:*:*:*:*:*
     *cpe:2.3:a:sophos:safeguard_lan_crypt_client:3.95.1:*:*:*:*:*:*:*
     *cpe:2.3:a:sophos:safeguard_lan_crypt_client:3.95.1:ts:*:*:*:*:*:*