WatchGuard Endpoint Protection Privilege Escalation in PSANHost Enables Arbitrary File Delete as SYSTEM

CVE-2024-8424

What is CVE-2024-8424?

A vulnerability exists in WatchGuard EPDR, Panda AD360, and Panda Dome software that allows an attacker to improperly manage privileges. Located within the PSANHost.exe module on Windows, the flaw facilitates arbitrary file deletion by leveraging SYSTEM-level permissions. This oversight poses significant risks to system integrity and data security, particularly for users operating versions prior to the specified updates. Organizations utilizing these products should prioritize implementing the latest versions to mitigate potential exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References