Local Privilege Escalation Vulnerability in WatchGuard EPDR
CVE-2023-26236

7.8HIGH

Key Information:

Vendor
Watchguard
Status
Epp Firmware
Vendor
CVE Published:
5 October 2023

Summary

A vulnerability has been identified in WatchGuard EPDR 8.0.21.0002 that allows for local privilege escalation on Windows systems. The flaw arises from a weak implementation of message handling processes. By sending a specially crafted message to a named pipe, attackers can escalate their privileges and potentially gain elevated access to the system. It is crucial for users to be aware of this vulnerability and to apply available patches or mitigations as soon as possible to protect their systems.

References

https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2023-...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.