PT-2023-5754 · Panda+1 · Panda Adaptive Defense 360+1

Antón Ortigueira Vázquez + 1 · Published 2023-02-20 · Updated 2024-09-20 · CVE-2023-26236

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WatchGuard EPDR version 8.0.21.0002

Description The issue is related to insufficient access control in the Protection Agent component of WatchGuard Endpoint Protection, Detection and Response (EPDR) and Panda Adaptive Defense 360 (Panda AD360). Exploitation of this issue can allow an attacker to elevate privileges by sending specially crafted messages to a named pipe. This can lead to Local Privilege Escalation on Windows.

Recommendations For WatchGuard EPDR version 8.0.21.0002, consider restricting access to the named pipe to minimize the risk of exploitation until a patch is available. As a temporary workaround, avoid using the vulnerable message handling functionality between WatchGuard EPDR processes. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Improper Privilege Management

Weakness Enumeration

CWE-284

CWE-269

Related Identifiers

BDU:2023-06432

CVE-2023-26236

Affected Products

Panda Adaptive Defense 360

Watchguard Epdr

References · 7

• https://osv.dev/vulnerability/CVE-2023-26236 · Vendor Advisory
• https://watchguard.com/wgrd-psirt/advisory/wgsa-2023-00004 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-06432 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-26236 · Security Note
• https://t.me/cvenotify/95441 · Telegram Post
• https://t.me/cibsecurity/71656 · Telegram Post
• https://vuldb.com/ru/?id.241336 · Note