CVE-2024-8424 — Improper Privilege Management in Epdr

CWE-269 — Improper Privilege Management3 documents3 sources
Severity
7.8HIGHNVD
EPSS
0.0%
top 87.72%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Watchguard EpdrWatchguard Panda Ad360Watchguard Panda Dome
Timeline
PublishedNov 8

Description

Improper Privilege Management vulnerability in WatchGuard EPDR, Panda AD360 and Panda Dome on Windows (PSANHost.exe module) allows arbitrary file delete with SYSTEM permissions. This issue affects EPDR: before 8.00.23.0000; Panda AD360: before 8.00.23.0000; Panda Dome: before 22.03.00.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages3 packages

▶CVEListV5watchguard/panda_dome< 22.03.00
▶CVEListV5watchguard/panda_ad360< 8.00.23.0000
▶CVEListV5watchguard/epdr< 8.00.23.0000

🔴Vulnerability Details

2
GHSA
GHSA-6jgr-2pw9-g4rc: Improper Privilege Management vulnerability in WatchGuard EPDR, Panda AD360 and Panda Dome on Windows (PSANHost↗2024-11-08
▶
CVEList
WatchGuard Endpoint Protection Privilege Escalation in PSANHost Enables Arbitrary File Delete as SYSTEM↗2024-11-07
▶
CVE-2024-8424 — Improper Privilege Management in Epdr | cvebase