Actu
Vigil@nce - Sophos Disk Encryption: disk access after sleep mode
September 2014 by Vigil@nce
This bulletin was written by Vigil@nce : http://vigilance.fr/offer
SYNTHESIS OF THE VULNERABILITY
An attacker can wake up a sleeping computer with no
authentication, in order to read or alter disk data, even if
Sophos Disk Encryption is used.
– Impacted products: SafeGuard Encryption
– Severity: 1/4
– Creation date: 01/09/2014
DESCRIPTION OF THE VULNERABILITY
The Sophos Disk Encryption product can be managed by Sophos
Enterprise Console (SEC).
When the Windows system is in sleep mode, an authentication is not
always required when the system is awake. Usually, SEC changes the
Windows configuration to require an authentication. However, this
is not always done.
An attacker can therefore wake up a sleeping computer with no
authentication, in order to read or alter disk data, even if
Sophos Disk Encryption is used.
ACCESS TO THE COMPLETE VIGIL@NCE BULLETIN
http://vigilance.fr/vulnerability/Sophos-Disk-Encryption-disk-access-after-sleep-mode-15250
