SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2021-25266

An insecure data storage vulnerability allows a physical attacker with root privileges to retrieve TOTP secret keys from unlocked phones in Sophos Authenticator for Android version 3.4 and older, and Intercept X for Mobile (Android) before version…

LOW 3.9EPSS 0.23%

Does this matter?

Lower severity and a low EPSS score (0.23%). Track it; it rarely justifies an emergency change on its own.

Description

An insecure data storage vulnerability allows a physical attacker with root privileges to retrieve TOTP secret keys from unlocked phones in Sophos Authenticator for Android version 3.4 and older, and Intercept X for Mobile (Android) before version 9.7.3495.

CVSS 3.1
3.9 LOWCVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
EPSS
0.23% probability · 14th percentile
CISA KEV
Not listed
Weakness
CWE-922
Affected
sophos/authenticator · sophos/intercept x
Source
security-alert@sophos.com

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.