CVE-2024-13972 — Sophos / Sophos Intercept X for Windows Core Agent

CVE-2024-13972

Sophos / Sophos Intercept X for Windows Core Agent PUBLISHED

Description (CNA)

A vulnerability related to registry permissions in the Intercept X for Windows updater prior to Core Agent version 2024.3.2 can lead to a local user gaining SYSTEM level privileges during a product upgrade.

Affected (CNA)

Vendor / product	Versions
Sophos / Sophos Intercept X for Windows Core Agent	affected 0 before 2024.3.2

CWE

CWE-276

References

https://www.sophos.com/en-us/security-advisories/sophos-sa-20250717-cix-lpe

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.