Lucene search

K
nvd[email protected]NVD:CVE-2023-26238
HistoryOct 05, 2023 - 1:15 a.m.

CVE-2023-26238

2023-10-0501:15:10
web.nvd.nist.gov
2
watchguard
epdr
security vulnerability
named pipe
crafted message

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS

0

Percentile

9.0%

An issue was discovered in WatchGuard EPDR 8.0.21.0002. It is possible to enable or disable defensive capabilities by sending a crafted message to a named pipe.

Affected configurations

Nvd
Node
watchguardepp_firmwareRange<8.00.22.0010
AND
watchguardeppMatch-
Node
watchguardedr_firmwareRange<8.00.22.0010
AND
watchguardedrMatch-
Node
watchguardepdr_firmwareRange<8.00.22.0010
AND
watchguardepdrMatch-
Node
watchguardpanda_ad360_firmwareRange<8.00.22.0010
AND
watchguardpanda_ad360Match-
VendorProductVersionCPE
watchguardepp_firmware*cpe:2.3:o:watchguard:epp_firmware:*:*:*:*:*:*:*:*
watchguardepp-cpe:2.3:h:watchguard:epp:-:*:*:*:*:*:*:*
watchguardedr_firmware*cpe:2.3:o:watchguard:edr_firmware:*:*:*:*:*:*:*:*
watchguardedr-cpe:2.3:h:watchguard:edr:-:*:*:*:*:*:*:*
watchguardepdr_firmware*cpe:2.3:o:watchguard:epdr_firmware:*:*:*:*:*:*:*:*
watchguardepdr-cpe:2.3:h:watchguard:epdr:-:*:*:*:*:*:*:*
watchguardpanda_ad360_firmware*cpe:2.3:o:watchguard:panda_ad360_firmware:*:*:*:*:*:*:*:*
watchguardpanda_ad360-cpe:2.3:h:watchguard:panda_ad360:-:*:*:*:*:*:*:*

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS

0

Percentile

9.0%

Related for NVD:CVE-2023-26238