CVE-2023-26236
First published: Thu Oct 05 2023(Updated: )
An issue was discovered in WatchGuard EPDR 8.0.21.0002. Due to a weak implementation of message handling between WatchGuard EPDR processes, it is possible to perform a Local Privilege Escalation on Windows by sending a crafted message to a named pipe.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Watchguard Epp Firmware | <8.00.22.0010 | |
| Watchguard Epp | ||
| Watchguard Edr Firmware | <8.00.22.0010 | |
| Watchguard Edr | ||
| Watchguard Epdr Firmware | <8.00.22.0010 | |
| WatchGuard EPDR | ||
| Watchguard Panda Ad360 Firmware | <8.00.22.0010 | |
| Watchguard Panda Ad360 | ||
| All of | ||
| Watchguard Epp | ||
| Watchguard Epp Firmware | <8.00.22.0010 | |
| All of | ||
| Watchguard Edr | ||
| Watchguard Edr Firmware | <8.00.22.0010 | |
| All of | ||
| WatchGuard EPDR | ||
| Watchguard Epdr Firmware | <8.00.22.0010 | |
| All of | ||
| Watchguard Panda Ad360 | ||
| Watchguard Panda Ad360 Firmware | <8.00.22.0010 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID for this issue in WatchGuard EPDR?
The vulnerability ID for this issue in WatchGuard EPDR is CVE-2023-26236.
What is the severity of CVE-2023-26236?
The severity of CVE-2023-26236 is high with a severity value of 7.8.
Which software versions are affected by CVE-2023-26236?
The affected software versions are WatchGuard EPDR 8.0.21.0002 up to exclusive version 8.00.22.0010.
How can an attacker exploit this vulnerability?
An attacker can exploit this vulnerability by sending a crafted message to a named pipe, leading to a local privilege escalation on Windows.
Is WatchGuard EPP or WatchGuard EDR vulnerable to CVE-2023-26236?
No, WatchGuard EPP and WatchGuard EDR are not vulnerable to CVE-2023-26236.
- collector/nvd-index
- agent/author
- agent/type
- agent/references
- agent/severity
- agent/description
- agent/first-publish-date
- agent/event
- collector/mitre-cve
- source/MITRE
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/weakness
- agent/softwarecombine
- agent/tags
- vendor/watchguard
- canonical/watchguard epp firmware
- canonical/watchguard epp
- canonical/watchguard edr firmware
- canonical/watchguard edr
- canonical/watchguard epdr firmware
- canonical/watchguard epdr
- canonical/watchguard panda ad360 firmware
- canonical/watchguard panda ad360