OpenCVE

Improper Privilege Management vulnerability in WatchGuard EPDR, Panda AD360 and Panda Dome on Windows (PSANHost.exe module) allows arbitrary file delete with SYSTEM permissions. This issue affects EPDR: before 8.00.23.0000; Panda AD360: before 8.00.23.0000; Panda Dome: before 22.03.00.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

Vendors	Products
Watchgua	Panda Dome Firmware
Watchguard	Epdr Firmware Panda Ad360 Firmware

No data.

No data.

References

Link	Providers
https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2024-00017

History

Fri, 08 Nov 2024 16:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Watchgua Watchgua panda Dome Firmware Watchguard Watchguard epdr Firmware Watchguard panda Ad360 Firmware
CPEs		cpe:2.3:o:watchgua:panda_dome_firmware:::::::: cpe:2.3:o:watchguard:epdr_firmware:::::::: cpe:2.3:o:watchguard:panda_ad360_firmware::::::::
Vendors & Products		Watchgua Watchgua panda Dome Firmware Watchguard Watchguard epdr Firmware Watchguard panda Ad360 Firmware
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Thu, 07 Nov 2024 23:30:00 +0000

Type	Values Removed	Values Added
Description		Improper Privilege Management vulnerability in WatchGuard EPDR, Panda AD360 and Panda Dome on Windows (PSANHost.exe module) allows arbitrary file delete with SYSTEM permissions. This issue affects EPDR: before 8.00.23.0000; Panda AD360: before 8.00.23.0000; Panda Dome: before 22.03.00.
Title		WatchGuard Endpoint Protection Privilege Escalation in PSANHost Enables Arbitrary File Delete as SYSTEM
Weaknesses		CWE-269
References		https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2024-00017
Metrics		cvssV3_1 `{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}`

MITRE

Status: PUBLISHED

Assigner: WatchGuard

Published: 2024-11-07T23:27:50.279Z

Updated: 2024-11-08T15:28:51.297Z

Reserved: 2024-09-04T14:08:29.933Z

Link: CVE-2024-8424

Vulnrichment

Updated: 2024-11-08T15:28:43.363Z

NVD

Status : Awaiting Analysis

Published: 2024-11-08T00:15:15.807

Modified: 2024-11-08T19:01:03.880

Link: CVE-2024-8424

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-8424", "assignerOrgId": "5d1c2695-1a31-4499-88ae-e847036fd7e3", "state": "PUBLISHED", "assignerShortName": "WatchGuard", "dateReserved": "2024-09-04T14:08:29.933Z", "datePublished": "2024-11-07T23:27:50.279Z", "dateUpdated": "2024-11-08T15:28:51.297Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "modules": ["PSANHost"], "platforms": ["Windows"], "product": "EPDR", "vendor": "WatchGuard", "versions": [{"lessThan": "8.00.23.0000", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "modules": ["PSANHost"], "platforms": ["Windows"], "product": "Panda AD360", "vendor": "WatchGuard", "versions": [{"lessThan": "8.00.23.0000", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "modules": ["PSANHost"], "platforms": ["Windows"], "product": "Panda Dome", "vendor": "WatchGuard", "versions": [{"lessThan": "22.03.00", "status": "affected", "version": "0", "versionType": "semver"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Improper Privilege Management vulnerability in WatchGuard EPDR, Panda AD360 and Panda Dome on Windows (PSANHost.exe module) allows arbitrary file delete with SYSTEM permissions.<br><p>This issue affects EPDR: before 8.00.23.0000; Panda AD360: before 8.00.23.0000; Panda Dome: before 22.03.00.</p>"}], "value": "Improper Privilege Management vulnerability in WatchGuard EPDR, Panda AD360 and Panda Dome on Windows (PSANHost.exe module) allows arbitrary file delete with SYSTEM permissions.\nThis issue affects EPDR: before 8.00.23.0000; Panda AD360: before 8.00.23.0000; Panda Dome: before 22.03.00."}], "impacts": [{"capecId": "CAPEC-233", "descriptions": [{"lang": "en", "value": "CAPEC-233 Privilege Escalation"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-269", "description": "CWE-269 Improper Privilege Management", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "5d1c2695-1a31-4499-88ae-e847036fd7e3", "shortName": "WatchGuard", "dateUpdated": "2024-11-08T00:57:31.232Z"}, "references": [{"url": "https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2024-00017"}], "source": {"discovery": "UNKNOWN"}, "title": "WatchGuard Endpoint Protection Privilege Escalation in PSANHost Enables Arbitrary File Delete as SYSTEM", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"affected": [{"vendor": "watchguard", "product": "epdr_firmware", "cpes": ["cpe:2.3:o:watchguard:epdr_firmware:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThan": "8.00.23.0000", "versionType": "semver"}]}, {"vendor": "watchguard", "product": "panda_ad360_firmware", "cpes": ["cpe:2.3:o:watchguard:panda_ad360_firmware:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThan": "8.00.23.0000", "versionType": "semver"}]}, {"vendor": "watchgua", "product": "panda_dome_firmware", "cpes": ["cpe:2.3:o:watchgua:panda_dome_firmware:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThan": "22.03.00", "versionType": "semver"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-11-08T15:24:55.190870Z", "id": "CVE-2024-8424", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-08T15:28:51.297Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-8424", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-11-08T15:24:55.190870Z"}}}], "affected": [{"cpes": ["cpe:2.3:o:watchguard:epdr_firmware:*:*:*:*:*:*:*:*"], "vendor": "watchguard", "product": "epdr_firmware", "versions": [{"status": "affected", "version": "0", "lessThan": "8.00.23.0000", "versionType": "semver"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:watchguard:panda_ad360_firmware:*:*:*:*:*:*:*:*"], "vendor": "watchguard", "product": "panda_ad360_firmware", "versions": [{"status": "affected", "version": "0", "lessThan": "8.00.23.0000", "versionType": "semver"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:watchgua:panda_dome_firmware:*:*:*:*:*:*:*:*"], "vendor": "watchgua", "product": "panda_dome_firmware", "versions": [{"status": "affected", "version": "0", "lessThan": "22.03.00", "versionType": "semver"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-08T15:28:43.363Z"}}], "cna": {"title": "WatchGuard Endpoint Protection Privilege Escalation in PSANHost Enables Arbitrary File Delete as SYSTEM", "source": {"discovery": "UNKNOWN"}, "impacts": [{"capecId": "CAPEC-233", "descriptions": [{"lang": "en", "value": "CAPEC-233 Privilege Escalation"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "WatchGuard", "modules": ["PSANHost"], "product": "EPDR", "versions": [{"status": "affected", "version": "0", "lessThan": "8.00.23.0000", "versionType": "semver"}], "platforms": ["Windows"], "defaultStatus": "unaffected"}, {"vendor": "WatchGuard", "modules": ["PSANHost"], "product": "Panda AD360", "versions": [{"status": "affected", "version": "0", "lessThan": "8.00.23.0000", "versionType": "semver"}], "platforms": ["Windows"], "defaultStatus": "unaffected"}, {"vendor": "WatchGuard", "modules": ["PSANHost"], "product": "Panda Dome", "versions": [{"status": "affected", "version": "0", "lessThan": "22.03.00", "versionType": "semver"}], "platforms": ["Windows"], "defaultStatus": "unaffected"}], "references": [{"url": "https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2024-00017"}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "Improper Privilege Management vulnerability in WatchGuard EPDR, Panda AD360 and Panda Dome on Windows (PSANHost.exe module) allows arbitrary file delete with SYSTEM permissions.\nThis issue affects EPDR: before 8.00.23.0000; Panda AD360: before 8.00.23.0000; Panda Dome: before 22.03.00.", "supportingMedia": [{"type": "text/html", "value": "Improper Privilege Management vulnerability in WatchGuard EPDR, Panda AD360 and Panda Dome on Windows (PSANHost.exe module) allows arbitrary file delete with SYSTEM permissions.<br><p>This issue affects EPDR: before 8.00.23.0000; Panda AD360: before 8.00.23.0000; Panda Dome: before 22.03.00.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-269", "description": "CWE-269 Improper Privilege Management"}]}], "providerMetadata": {"orgId": "5d1c2695-1a31-4499-88ae-e847036fd7e3", "shortName": "WatchGuard", "dateUpdated": "2024-11-08T00:57:31.232Z"}}}, "cveMetadata": {"cveId": "CVE-2024-8424", "state": "PUBLISHED", "dateUpdated": "2024-11-08T15:28:51.297Z", "dateReserved": "2024-09-04T14:08:29.933Z", "assignerOrgId": "5d1c2695-1a31-4499-88ae-e847036fd7e3", "datePublished": "2024-11-07T23:27:50.279Z", "assignerShortName": "WatchGuard"}, "dataVersion": "5.1"}