CVE-2024-8424: WatchGuard Endpoint Protection Privilege Escalation in PSANHost Enables Arbitrary File Delete as SYSTEM
Improper Privilege Management vulnerability in WatchGuard EPDR, Panda AD360 and Panda Dome on Windows (PSANHost.exe module) allows arbitrary file delete with SYSTEM permissions. This issue affects EPDR: before 8.00.23.0000; Panda AD360: before 8.00.23.0000; Panda Dome: before 22.03.00.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability severity of CVE-2024-8424?
CVE-2024-8424 is considered a critical vulnerability due to its impact on unauthorized file deletion with SYSTEM privileges.
How can I mitigate CVE-2024-8424 in WatchGuard EPDR?
To mitigate CVE-2024-8424, upgrade WatchGuard EPDR to version 8.00.23.0000 or later.
What versions of Panda AD360 are affected by CVE-2024-8424?
Panda AD360 versions prior to 8.00.23.0000 are affected by CVE-2024-8424.
What is the nature of the flaw described in CVE-2024-8424?
CVE-2024-8424 involves improper privilege management that allows arbitrary file deletion.
Can CVE-2024-8424 be exploited remotely?
CVE-2024-8424 typically requires local access to exploit the privilege escalation and perform arbitrary file deletions.