CVE-2014-2005

Severity: medium (CVSS 6.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-06-25 · updated 2026-06-17
Weakness: CWE-287

Description

Sophos Disk Encryption (SDE) 5.x in Sophos Enterprise Console (SEC) 5.x before 5.2.2 does not enforce intended authentication requirements for a resume action from sleep mode, which allows physically proximate attackers to obtain desktop access by leveraging the absence of a login screen.

Affected products

Sophos Enterprise Console: through 5.2.1; 5.1, 5.2, 5.2.1

References

http://jvn.jp/en/jp/JVN63940326/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2014-000061
http://www.securityfocus.com/bid/68169
http://www.sophos.com/en-us/support/knowledgebase/121066.aspx
http://jvn.jp/en/jp/JVN63940326/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2014-000061
http://www.securityfocus.com/bid/68169
http://www.sophos.com/en-us/support/knowledgebase/121066.aspx

Get alerted when CVE-2014-2005 or the next vulnerability affects your stack