ZDI-24-1017: (0Day) Panda Security Dome Link Following Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Panda Security Dome. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the PSANHost executable. By creating a junction, an attacker can abuse the service to delete arbitrary files. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM.
Other sources
This vulnerability allows local attackers to escalate privileges on affected installations of Panda Security Dome. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2024-7242.
— ZDI
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-24-1017?
The severity of ZDI-24-1017 is categorized as a moderate risk, allowing local privilege escalation.
How do I fix ZDI-24-1017?
To fix ZDI-24-1017, users should update the Panda Security Dome software to the latest version provided by Panda Security.
Who is affected by ZDI-24-1017?
ZDI-24-1017 affects users of Panda Security Dome who have installed vulnerable versions of the software.
Can ZDI-24-1017 be exploited remotely?
No, ZDI-24-1017 requires local access to the system for exploitation to occur.
What is the nature of ZDI-24-1017 vulnerability?
The nature of ZDI-24-1017 vulnerability allows privilege escalation for attackers with low-privileged access.