Sophos Small Business Suite 1.00 on Windows does not properly handle files whose names contain reserved MS-DOS device names such as (1) LPT1, (2) COM1, (3) AUX, (4) CON, or (5) PRN, which can allow malicious code to bypass detection when it is installed, copied, or executed.

Threat-Mapped Scoring

Score: 0.0

Priority: Unclassified

EPSS

Score: 0.16369
Percentile: 0.94558

CVSS Scoring

Affected Products

• cpe:2.3:a:sophos:small_business_suite:*:*:*:*:*:*:*:*

← Back to Home