CVE-2024-8424

Name of the Vulnerable Software and Affected Versions: WatchGuard EPDR versions prior to 8.00.23.0000 Panda AD360 versions prior to 8.00.23.0000 Panda Dome versions prior to 22.03.00

Description: The issue is related to improper privilege management, allowing local attackers to escalate privileges on affected installations. This vulnerability enables arbitrary file deletion with SYSTEM permissions. The PSANHost.exe module is specifically affected.

Recommendations: For WatchGuard EPDR versions prior to 8.00.23.0000, update to version 8.00.23.0000 or later. For Panda AD360 versions prior to 8.00.23.0000, update to version 8.00.23.0000 or later. For Panda Dome versions prior to 22.03.00, update to version 22.03.00 or later. As a temporary workaround, consider restricting access to the PSANHost.exe module to minimize the risk of exploitation.