PT-2023-5754 · Panda+1 · Panda Adaptive Defense 360+1

Antón Ortigueira Vázquez + 1 · Publicado 2023-02-20 · Atualizado 2024-09-20 · CVE-2023-26236

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WatchGuard EPDR version 8.0.21.0002

Description The issue is related to insufficient access control in the Protection Agent component of WatchGuard Endpoint Protection, Detection and Response (EPDR) and Panda Adaptive Defense 360 (Panda AD360). Exploitation of this issue can allow an attacker to elevate privileges by sending specially crafted messages to a named pipe. This can lead to Local Privilege Escalation on Windows.

Recommendations For WatchGuard EPDR version 8.0.21.0002, consider restricting access to the named pipe to minimize the risk of exploitation until a patch is available. As a temporary workaround, avoid using the vulnerable message handling functionality between WatchGuard EPDR processes. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Improper Privilege Management

Enumeração de Fraquezas

CWE-284

CWE-269

Identificadores relacionados

BDU:2023-06432

CVE-2023-26236

Produtos afetados

Panda Adaptive Defense 360

Watchguard Epdr

Referências · 7

• https://osv.dev/vulnerability/CVE-2023-26236 · Aviso do Fabricante
• https://watchguard.com/wgrd-psirt/advisory/wgsa-2023-00004 · Aviso do Fabricante
• https://t.me/cvenotify/95441 · Publicação no Telegram
• https://bdu.fstec.ru/vul/2023-06432 · Nota de Segurança
• https://t.me/cibsecurity/71656 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-26236 · Nota de Segurança
• https://vuldb.com/ru/?id.241336 · Nota