Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2012-4736: Sophos SafeGuard 6.0 permits data copy to exFAT USB

CVE-2012-4736 · published 14 years ago

Summary

The Device Encryption feature in Sophos SafeGuard Enterprise version 6.0 does not stop users from using exFAT‑formatted USB flash drives when a volume‑based encryption policy with a custom key is applied. This lets a local user move sensitive files onto removable drives by repeatedly removing and re‑attaching them, bypassing the intended protection. Apply stricter encryption policies, update to a version that fixes the problem, or disable the use of exFAT removable media until a patch is available.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
sophos	safeguard_enterprise	6.0 `cpe:2.3:a:sophos:safeguard_enterprise:6.0:::::::*`

Original advisory text

The Device Encryption Client component in Sophos SafeGuard Enterprise 6.0, when a volume-based encryption policy is enabled in conjunction with a user-defined key, does not properly block use of exFAT USB flash drives, which makes it easier for local users to bypass intended access restrictions and copy sensitive information to a drive via multiple removal and reattach operations.

References

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker partial control (estimated)

Severity

3.3 Low

Exploitation

<1% chance of attack within 30 days

Type

CWE-264Permissions, Privileges, and Access Controls

Timeline

Published29 Aug 2012

Updated4 Nov 2026

First seen29 Sep 2026

Sources

CVE-2012-4736 · NVD

Track software like this

Free during beta