PT-2024-1474 · Panda+1 · Panda Dome+2

Published 2024-01-18 · Updated 2024-01-29 · CVE-2023-6331

Positive Technologies (AI Summary)

CVSS v2.0

5.9

Medium

Base vector

AV:L/AC:H/Au:M/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Watchguard Endpoint Protection, Detection and Response (EPDR) (affected versions not specified) Panda Adaptive Defense 360 (Panda AD360) (affected versions not specified) Panda Dome (affected versions not specified)

Description The issue is related to a buffer overflow in the pskmad 64.sys driver of the endpoint security solutions. This can lead to a denial of service or allow an attacker to execute arbitrary code.

Recommendations For Watchguard Endpoint Protection, Detection and Response (EPDR), update to a version that includes a fix for the buffer overflow issue in the pskmad 64.sys driver. For Panda Adaptive Defense 360 (Panda AD360), update to a version that includes a fix for the buffer overflow issue in the pskmad 64.sys driver. For Panda Dome, update to a version that includes a fix for the buffer overflow issue in the pskmad 64.sys driver.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2024-00980

CVE-2023-6331

Affected Products

Panda Adaptive Defense 360

Panda Dome

Watchguard Endpoint Protection

References · 4

• https://bdu.fstec.ru/vul/2024-00980 · Security Note
• https://t.me/true_secator/5347 · Telegram Post
• https://news.sophos.com/en-us/2024/01/25/multiple-vulnerabilities-discovered-in-widely-used-security-driver · Note
• https://watchguard.com/wgrd-psirt/advisory/wgsa-2024-00002 · Note