How severe is CVE-2021-25270?

CVE-2021-25270 has a CVSS 3.x base score of 6.7, rated medium severity. It is exploitable over local access with low attack complexity, requires high privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability high.

Is CVE-2021-25270 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (17th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2021-25270?

CVE-2021-25270 affects Sophos Hitmanpro.alert. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2021-25270?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2021-25270 published?

CVE-2021-25270 was published on 2021-10-08 and last updated on 2026-06-17.

CVE-2021-25270

CVE-2021-25270 is a medium-severity vulnerability in Sophos Hitmanpro.alert with a CVSS 3.x base score of 6.7. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: Medium (CVSS 3.x base score 6.7)
CVSS v2: 7.2
EPSS exploit prediction: 0% (17th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Sophos Hitmanpro.alert
Published: 2021-10-08
Last modified: 2026-06-17

Description

A local attacker could execute arbitrary code with administrator privileges in HitmanPro.Alert before version Build 901.

Frequently asked questions

What is CVE-2021-25270?: A local attacker could execute arbitrary code with administrator privileges in HitmanPro.Alert before version Build 901.
How severe is CVE-2021-25270?: CVE-2021-25270 has a CVSS 3.x base score of 6.7, rated medium severity. It is exploitable over local access with low attack complexity, requires high privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability high.
Is CVE-2021-25270 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (17th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2021-25270?: CVE-2021-25270 affects Sophos Hitmanpro.alert. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2021-25270?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2021-25270 published?: CVE-2021-25270 was published on 2021-10-08 and last updated on 2026-06-17.

References

https://www.sophos.com/en-us/security-advisories/sophos-sa-20211007-hmpa-lpe

Affected products (1)

cpe:2.3:a:sophos:hitmanpro.alert:*:*:*:*:*:*:*:*

More vulnerabilities in Sophos Hitmanpro.alert

CVE-2020-9540 — High (CVSS 7.8): Sophos HitmanPro.Alert before build 861 allows local elevation of privilege.
CVE-2018-3971 — High (CVSS 7.8): An exploitable arbitrary write vulnerability exists in the 0x2222CC IOCTL handler functionality of Sophos…
CVE-2018-3970 — Medium (CVSS 5.5): An exploitable memory disclosure vulnerability exists in the 0x222000 IOCTL handler functionality of Sophos…

All CVEs affecting Sophos Hitmanpro.alert →