WatchGuard Endpoint Protection Privilege Escalation in PSANHost Enables Arbitrary File Delete as SYSTEM

CVE-2024-8424

Summary

A vulnerability exists in WatchGuard EPDR, Panda AD360, and Panda Dome software that allows an attacker to improperly manage privileges. Located within the PSANHost.exe module on Windows, the flaw facilitates arbitrary file deletion by leveraging SYSTEM-level permissions. This oversight poses significant risks to system integrity and data security, particularly for users operating versions prior to the specified updates. Organizations utilizing these products should prioritize implementing the latest versions to mitigate potential exploitation.

References