CVE-2014-2005: Sophos Disk Encryption (SDE) 5.x in Sophos Enterprise Console (SEC) 5.x before 5.2.2 does not enforce inten...

Security readout for executives and security teams

This issue can let someone with physical access to a protected computer reach the desktop after it resumes from sleep, because the expected login screen may not appear. The provided sources do not show remote exploitation or active exploitation. Risk is highest for unattended, shared, lost, or stolen laptops using the affected Sophos disk encryption stack. Exposure is likely limited to environments using Sophos Disk Encryption 5.x with Sophos Enterprise Console 5.x before 5.2.2. Systems that sleep while unattended are the main concern. The supplied structured affected-product fields are incomplete, so confirm against Sophos and JVN records. Treat this as a targeted physical-access risk, not an internet-scale emergency. Remediate affected laptop fleets and privileged-user devices first, because successful exploitation could expose an already logged-in desktop despite disk encryption expectations. Mitigation focus: Upgrade affected Sophos Enterprise Console deployments to 5.2.2 or later if applicable.; Review Sophos knowledgebase article 121066 for vendor-confirmed remediation guidance.; Ensure endpoints require authentication after sleep or screen lock..

Prepared

Jun 14, 2026, 14:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.