Local Privilege Escalation Vulnerability in Panda Security Dome

CVE-2024-7241

What is CVE-2024-7241?

A local privilege escalation vulnerability has been identified in the Panda Security Dome, stemming from a flaw within the PSANHost service. This vulnerability enables local attackers, who already have access to execute low-privileged code on the target system, to escalate their privileges. By creating a junction, an attacker can exploit this flaw to create arbitrary files and execute malicious code with SYSTEM privileges, potentially compromising the security of the system without detection. Users of affected versions are advised to apply the latest patches to mitigate the risks associated with this vulnerability.

References