Sophos Taegis Endpoint Agent
cpe:2.3:a:sophos:taegis_endpoint_agent:*:*:*:*:linux:*:*
- < 1.3.10
A code injection vulnerability has been identified in the Debian package component of Taegis Endpoint Agent for Linux, affecting versions prior to 1.3.10. This vulnerability allows local users to execute arbitrary code with root privileges. It is important to note that Red Hat-based systems using RPM packages are not affected.
Exploitation of this vulnerability could lead to unauthorized execution of code as the root user, potentially allowing for full control over the affected system.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.