ZDI-CAN-23477: ZDI-24-1533: Panda Security Dome PSANHost Link Following Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Panda Security Dome. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2024-8424.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-23477?
ZDI-CAN-23477 is rated with a CVSS score indicating a high severity level due to its potential for privilege escalation.
How do I fix ZDI-CAN-23477?
To fix ZDI-CAN-23477, ensure that your Panda Security Dome software is updated to the latest version with all security patches applied.
Who is affected by ZDI-CAN-23477?
ZDI-CAN-23477 affects installations of Panda Security Dome running on systems where low-privileged code execution can be obtained.
What type of vulnerability is ZDI-CAN-23477?
ZDI-CAN-23477 is a privilege escalation vulnerability that allows local attackers to gain elevated access on the affected systems.
What is necessary to exploit ZDI-CAN-23477?
An attacker must first have the capability to execute low-privileged code on the target system to exploit ZDI-CAN-23477.