Local Privilege Escalation Vulnerability in Panda Security Dome

CVE-2024-7243

What is CVE-2024-7243?

A local privilege escalation vulnerability exists in the Panda Security Dome due to a flaw in the PSANHost executable. This flaw can be exploited by an attacker who gains execution capability of low-privileged code on the target system. By manipulating the service to create junctions, an attacker can generate arbitrary files, leading to the potential execution of arbitrary code with elevated permissions, effectively allowing the attacker to escalate their privileges to the SYSTEM level.

References