PT-2024-1473 · Panda+1 · Panda Dome+2

Published 2024-01-18 · Updated 2024-01-29 · CVE-2023-6332

Positive Technologies (AI Summary)

CVSS v2.0

3.7

Low

Base vector

AV:L/AC:H/Au:M/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Watchguard Endpoint Protection, Detection and Response (EPDR) (affected versions not specified) Panda Adaptive Defense 360 (Panda AD360) (affected versions not specified) Panda Dome (affected versions not specified)

Description The issue is related to a driver vulnerability in pskmad 64.sys, which is part of the endpoint security solutions. This vulnerability is associated with information disclosure. Exploitation of the vulnerability could allow an attacker to gain unauthorized access to confidential information.

Recommendations For Watchguard Endpoint Protection, Detection and Response (EPDR), at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Panda Adaptive Defense 360 (Panda AD360), at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Panda Dome, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2024-00979

CVE-2023-6332

Affected Products

Panda Adaptive Defense 360

Panda Dome

Watchguard Endpoint Protection

References · 4

• https://bdu.fstec.ru/vul/2024-00979 · Security Note
• https://watchguard.com/wgrd-psirt/advisory/wgsa-2024-00003 · Note
• https://news.sophos.com/en-us/2024/01/25/multiple-vulnerabilities-discovered-in-widely-used-security-driver · Note
• https://t.me/true_secator/5347 · Telegram Post