CVE-2023-26236
First published: Thu Oct 05 2023(Updated: )
An issue was discovered in WatchGuard EPDR 8.0.21.0002. Due to a weak implementation of message handling between WatchGuard EPDR processes, it is possible to perform a Local Privilege Escalation on Windows by sending a crafted message to a named pipe.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| WatchGuard EPP Firmware | <8.00.22.0010 | |
| WatchGuard EPP Firmware | ||
| WatchGuard EDR Firmware | <8.00.22.0010 | |
| Watchguard EDR Firmware | ||
| WatchGuard EPDR Firmware | <8.00.22.0010 | |
| WatchGuard Endpoint Protection and Detection Response (EPDR) | ||
| Watchguard Panda Ad360 Firmware | <8.00.22.0010 | |
| Watchguard Panda Ad360 Firmware | ||
| All of | ||
| WatchGuard EPP Firmware | ||
| WatchGuard EPP Firmware | <8.00.22.0010 | |
| All of | ||
| Watchguard EDR Firmware | ||
| WatchGuard EDR Firmware | <8.00.22.0010 | |
| All of | ||
| WatchGuard Endpoint Protection and Detection Response (EPDR) | ||
| WatchGuard EPDR Firmware | <8.00.22.0010 | |
| All of | ||
| Watchguard Panda Ad360 Firmware | ||
| Watchguard Panda Ad360 Firmware | <8.00.22.0010 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID for this issue in WatchGuard EPDR?
The vulnerability ID for this issue in WatchGuard EPDR is CVE-2023-26236.
What is the severity of CVE-2023-26236?
The severity of CVE-2023-26236 is high with a severity value of 7.8.
Which software versions are affected by CVE-2023-26236?
The affected software versions are WatchGuard EPDR 8.0.21.0002 up to exclusive version 8.00.22.0010.
How can an attacker exploit this vulnerability?
An attacker can exploit this vulnerability by sending a crafted message to a named pipe, leading to a local privilege escalation on Windows.
Is WatchGuard EPP or WatchGuard EDR vulnerable to CVE-2023-26236?
No, WatchGuard EPP and WatchGuard EDR are not vulnerable to CVE-2023-26236.
- agent/type
- agent/references
- agent/severity
- agent/description
- agent/first-publish-date
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/weakness
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-index
- agent/author
- vendor/watchguard
- canonical/watchguard epp firmware
- canonical/watchguard edr firmware
- canonical/watchguard endpoint protection and detection response (epdr)
- canonical/watchguard epdr firmware
- canonical/watchguard panda ad360 firmware