Local Privilege Escalation Vulnerability in Panda Security Dome

CVE-2024-7242

What is CVE-2024-7242?

A local privilege escalation vulnerability exists in the Panda Security Dome, specifically within the PSANHost executable. This flaw allows local attackers, after executing low-privileged code on the system, to escalate their privileges by manipulating the service to delete arbitrary files. By leveraging this vulnerability, an attacker can gain SYSTEM-level access, executing arbitrary code with elevated permissions, thereby compromising the security and integrity of the affected installations. This vulnerability poses a serious threat to users of Panda Security Dome, necessitating prompt remediation to mitigate potential exploitation.

References