CVE-2024-8424

Improper Privilege Management vulnerability in WatchGuard EPDR, Panda AD360 and Panda Dome on Windows (PSANHost.exe module) allows arbitrary file delete with SYSTEM permissions.

CVSS

No CVSS.

References

Link	Resource
https://psirt.watchguard.com/CVE-2024-8424
https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2024-00017

Configurations

No configuration.

History

No history.

Information

Published : 2024-11-08 00:15

Updated : 2026-08-08 00:16

NVD link : CVE-2024-8424

Mitre link : CVE-2024-8424

CVE.ORG link : CVE-2024-8424

JSON object : View

Products Affected

No product.

CWE

CWE-269

Improper Privilege Management

{"id": "CVE-2024-8424", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2024-8424", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2024-11-08T15:24:55.190870Z"}}], "cvssMetricV40": [{"type": "Secondary", "source": "5d1c2695-1a31-4499-88ae-e847036fd7e3", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 8.5, "Automatable": "NOT_DEFINED", "attackVector": "LOCAL", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "5d1c2695-1a31-4499-88ae-e847036fd7e3", "affectedData": [{"vendor": "WatchGuard", "product": "Endpoint Security", "versions": [{"status": "affected", "version": "8.00.00.0000", "lessThan": "8.00.23.0000", "versionType": "semver"}], "platforms": ["Windows"], "defaultStatus": "unaffected"}, {"vendor": "WatchGuard", "product": "Panda Dome", "versions": [{"status": "affected", "version": "22.00.00", "lessThan": "22.03.00", "versionType": "semver"}], "platforms": ["Windows"], "defaultStatus": "unaffected"}]}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "affectedData": [{"cpes": ["cpe:2.3:o:watchguard:epdr_firmware:*:*:*:*:*:*:*:*"], "vendor": "watchguard", "product": "epdr_firmware", "versions": [{"status": "affected", "version": "0", "lessThan": "8.00.23.0000", "versionType": "semver"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:watchguard:panda_ad360_firmware:*:*:*:*:*:*:*:*"], "vendor": "watchguard", "product": "panda_ad360_firmware", "versions": [{"status": "affected", "version": "0", "lessThan": "8.00.23.0000", "versionType": "semver"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:watchgua:panda_dome_firmware:*:*:*:*:*:*:*:*"], "vendor": "watchgua", "product": "panda_dome_firmware", "versions": [{"status": "affected", "version": "0", "lessThan": "22.03.00", "versionType": "semver"}], "defaultStatus": "unknown"}]}], "published": "2024-11-08T00:15:15.807", "references": [{"url": "https://psirt.watchguard.com/CVE-2024-8424", "source": "5d1c2695-1a31-4499-88ae-e847036fd7e3"}, {"url": "https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2024-00017", "source": "5d1c2695-1a31-4499-88ae-e847036fd7e3"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "5d1c2695-1a31-4499-88ae-e847036fd7e3", "description": [{"lang": "en", "value": "CWE-269"}]}], "descriptions": [{"lang": "en", "value": "Improper Privilege Management vulnerability in WatchGuard EPDR, Panda AD360 and Panda Dome on Windows (PSANHost.exe module) allows arbitrary file delete with SYSTEM permissions."}, {"lang": "es", "value": "La vulnerabilidad de administraci\u00f3n incorrecta de privilegios en WatchGuard EPDR, Panda AD360 y Panda Dome en Windows (m\u00f3dulo PSANHost.exe) permite la eliminaci\u00f3n arbitraria de archivos con permisos del SYSTEM. Este problema afecta a EPDR: antes de 8.00.23.0000; Panda AD360: antes de 8.00.23.0000; Panda Dome: antes de 22.03.00."}], "lastModified": "2026-08-08T00:16:33.720", "sourceIdentifier": "5d1c2695-1a31-4499-88ae-e847036fd7e3"}

CVE-2024-8424

JSON object

Attach tags to CVE-2024-8424

Attach tags to `CVE-2024-8424`