Local Privilege Escalation Vulnerability in Panda Security Dome

CVE-2024-13043

What is CVE-2024-13043?

The vulnerability in Panda Security Dome presents a significant risk, allowing local attackers to escalate their privileges on affected installations. By leveraging a flaw within Hotspot Shield, attackers can create a junction, leading to the deletion of arbitrary files. The exploitation of this vulnerability necessitates that the attacker first execute low-privileged code on the target system. Once successful, the attacker can gain SYSTEM-level privileges, enabling the execution of arbitrary code within the affected environment. This creates a pathway for further compromise of the system and its data.

References