CVE-2024-8424: WatchGuard Endpoint Protection Privilege Escalation in PSANHost Enables Arbitrary File Delete as SYSTEM
Published Nov 7, 2024
·Updated
Improper Privilege Management vulnerability in WatchGuard EPDR, Panda AD360 and Panda Dome on Windows (PSANHost.exe module) allows arbitrary file delete with SYSTEM permissions.
Affected Software
3 affected components
WatchGuard WatchGuard EPDR
Panda AD360
Panda Dome
Event History
Nov 7, 2024
CVE Published
via MITRE·11:27 PM
Data Sourced
via MITRE·11:27 PM
RemedyDescriptionWeakness
Nov 8, 2024
Data Sourced
via NVD·12:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability severity of CVE-2024-8424?
CVE-2024-8424 is considered a critical vulnerability due to its impact on unauthorized file deletion with SYSTEM privileges.
2
How can I mitigate CVE-2024-8424 in WatchGuard EPDR?
To mitigate CVE-2024-8424, upgrade WatchGuard EPDR to version 8.00.23.0000 or later.
3
What versions of Panda AD360 are affected by CVE-2024-8424?
Panda AD360 versions prior to 8.00.23.0000 are affected by CVE-2024-8424.
4
What is the nature of the flaw described in CVE-2024-8424?
CVE-2024-8424 involves improper privilege management that allows arbitrary file deletion.
5
Can CVE-2024-8424 be exploited remotely?
CVE-2024-8424 typically requires local access to exploit the privilege escalation and perform arbitrary file deletions.