CyberRota Analysis
This is a low severity vulnerability with a CVSS score of 3.3. See the original NVD description below for full technical details.
CVE
CVE-2012-4736
Severity
LOW
CVSS
3.3
EPSS
0.45%
Original NVD Description
The Device Encryption Client component in Sophos SafeGuard Enterprise 6.0, when a volume-based encryption policy is enabled in conjunction with a user-defined key, does not properly block use of exFAT USB flash drives, which makes it easier for local users to bypass intended access restrictions and copy sensitive information to a drive via multiple removal and reattach operations.