CVE-2024-8424 — WatchGuard Endpoint Protection Privilege Escalation in PSANHost Enables Arbitrary File Delete as SYSTEM

CVE-2024-8424

WatchGuard Endpoint Protection Privilege Escalation in PSANHost Enables Arbitrary File Delete as SYSTEM PUBLISHED

Description (CNA)

Improper Privilege Management vulnerability in WatchGuard EPDR, Panda AD360 and Panda Dome on Windows (PSANHost.exe module) allows arbitrary file delete with SYSTEM permissions.

Affected (CNA)

Vendor / product	Versions
WatchGuard / Endpoint Security	affected 8.00.00.0000 before 8.00.23.0000
WatchGuard / Panda Dome	affected 22.00.00 before 22.03.00

CWE

CWE-269

References

https://psirt.watchguard.com/CVE-2024-8424
https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2024-00017

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.