ZDI-24-1471: Panda Security Dome PSANHost Link Following Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Panda Security Dome. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2024-8424.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-24-1471?
ZDI-24-1471 has been assigned a CVSS rating, indicating it poses a significant risk of privilege escalation.
How do I fix ZDI-24-1471?
To remediate ZDI-24-1471, update Panda Security Dome to the latest version provided by the vendor.
Who is affected by ZDI-24-1471?
ZDI-24-1471 affects installations of Panda Security Dome that are vulnerable to local privilege escalation.
What actions can an attacker take using ZDI-24-1471?
An attacker exploiting ZDI-24-1471 can escalate their privileges on the affected system after executing low-privileged code.
What is required for an attacker to exploit ZDI-24-1471?
An attacker must first gain the ability to execute low-privileged code on the target system to exploit ZDI-24-1471.