Panda Security Dome VPN Incorrect Permission Assignment Local Privilege Escalation Vulnerability

CVE-2024-7245

What is CVE-2024-7245?

The vulnerability associated with Panda Security Dome VPN enables local attackers to escalate their privileges due to improper permission assignments within the Hydra Sdk Windows Service. This security flaw allows an attacker, who has already successfully executed low-privileged code on the target system, to leverage the vulnerability for escalated access. By exploiting the misconfigured permissions on a specific folder created by the service, the attacker can execute arbitrary code with SYSTEM-level privileges, ultimately compromising the affected system's integrity and security.

References