Local Privilege Escalation Vulnerability in Comodo Firewall

CVE-2024-7249

What is CVE-2024-7249?

The vulnerability in Comodo Firewall enables local attackers to escalate privileges by exploiting a flaw in the cmdagent executable. Attackers must first execute low-privileged code on the target system. By creating a symbolic link, the attacker can manipulate the application to delete specified files, potentially gaining access to execute arbitrary code with SYSTEM-level privileges. This exploit highlights the importance of patching and security updates to mitigate risks associated with local privilege escalation vulnerabilities.

References