Lucene search
HistoryOct 05, 2023 - 1:15 a.m.
CVE-2023-26236
watchguard epdr
local privilege escalation
windows
named pipe
vulnerability
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0
Percentile
5.1%
An issue was discovered in WatchGuard EPDR 8.0.21.0002. Due to a weak implementation of message handling between WatchGuard EPDR processes, it is possible to perform a Local Privilege Escalation on Windows by sending a crafted message to a named pipe.
Affected configurations
Node
watchguardeppMatch-
watchguardepp_firmwareRange<8.00.22.0010
Node
watchguardedrMatch-
watchguardedr_firmwareRange<8.00.22.0010
Node
watchguardepdrMatch-
watchguardepdr_firmwareRange<8.00.22.0010
Node
watchguardpanda_ad360Match-
watchguardpanda_ad360_firmwareRange<8.00.22.0010
| Vendor | Product | Version | CPE |
|---|---|---|---|
| watchguard | epp | - | cpe:2.3:h:watchguard:epp:-:*:*:*:*:*:*:* |
| watchguard | epp_firmware | * | cpe:2.3:o:watchguard:epp_firmware:*:*:*:*:*:*:*:* |
| watchguard | edr | - | cpe:2.3:h:watchguard:edr:-:*:*:*:*:*:*:* |
| watchguard | edr_firmware | * | cpe:2.3:o:watchguard:edr_firmware:*:*:*:*:*:*:*:* |
| watchguard | epdr | - | cpe:2.3:h:watchguard:epdr:-:*:*:*:*:*:*:* |
| watchguard | epdr_firmware | * | cpe:2.3:o:watchguard:epdr_firmware:*:*:*:*:*:*:*:* |
| watchguard | panda_ad360 | - | cpe:2.3:h:watchguard:panda_ad360:-:*:*:*:*:*:*:* |
| watchguard | panda_ad360_firmware | * | cpe:2.3:o:watchguard:panda_ad360_firmware:*:*:*:*:*:*:*:* |
Related
prion
prion
Privilege escalation
2023-10-05 01:15:00
cve
cve
CVE-2023-26236
2023-10-05 01:15:10
cvelist
cvelist
CVE-2023-26236
2023-10-05 00:00:00
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0
Percentile
5.1%
Related for NVD:CVE-2023-26236