CVE-2023-26236

WatchGuard EPDR 8.0.21.0002 is affected by a Local Privilege Escalation due to a weak implementation of inter-process message handling, enabling crafted messages to a named pipe to escalate privileges on Windows. Affected component: Protection Agent (EPDR) and related Panda AD360 references. Publ...

CVE-2023-26238

WatchGuard EPDR 8.0.21.0002 is affected by CVE-2023-26238, where a crafted message to a named pipe allows an attacker to enable or disable defensive capabilities locally. The issue originates from the named pipe interface and the ability to affect the product’s defenses without user interaction. ...

CVE-2023-26239

Affected software: WatchGuard EPDR 8.0.21.0002. Vulnerability: weak implementation of a password check that can allow a non-privileged user to obtain credentials to access the management console. This is described across multiple sources in the connected documents as a credential-access weakness ...

CVE-2023-26237

CVE-2023-26237 affects WatchGuard EPDR 8.0.21.0002, where an attacker can bypass defensive capabilities by adding a registry key as SYSTEM. The issue is described as a local-impact bypass of protections, with CVSSv3.1 metrics indicating Local access, Low attack complexity, Privileges Required: Hi...