ZDI-24-1533: Panda Security Dome PSANHost Link Following Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Panda Security Dome. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2024-8424.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-24-1533?
ZDI-24-1533 has a CVSS rating that indicates it allows local privilege escalation on affected installations of Panda Security Dome.
How do I fix ZDI-24-1533?
To fix ZDI-24-1533, apply the recommended security patches provided by Panda Security for the Dome product.
Who is affected by ZDI-24-1533?
ZDI-24-1533 affects users of Panda Security Dome who have low-privileged code execution capabilities on their systems.
What types of attacks can exploit ZDI-24-1533?
ZDI-24-1533 can be exploited by local attackers who are able to run low-privileged code on the target system to escalate their privileges.
What versions of Panda Security Dome are impacted by ZDI-24-1533?
ZDI-24-1533 impacts all affected installations of Panda Security Dome without specifying particular versions.