PT-2024-39002
CVE-2024-8424
·
تاريخ النشر
2024-11-07
·
تاريخ التحديث
2026-08-08
الوصف من
CVSS 4.0
8.5
عاليةالمقاييسAV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions:
WatchGuard EPDR versions prior to 8.00.23.0000
Panda AD360 versions prior to 8.00.23.0000
Panda Dome versions prior to 22.03.00
Description:
The issue is related to improper privilege management, allowing local attackers to escalate privileges on affected installations. This vulnerability enables arbitrary file deletion with SYSTEM permissions. The
PSANHost.exe module is specifically affected.Recommendations:
For WatchGuard EPDR versions prior to 8.00.23.0000, update to version 8.00.23.0000 or later.
For Panda AD360 versions prior to 8.00.23.0000, update to version 8.00.23.0000 or later.
For Panda Dome versions prior to 22.03.00, update to version 22.03.00 or later.
As a temporary workaround, consider restricting access to the
PSANHost.exe module to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾