CVE-2023-26236

2023-10-0500:00:00

mitre

github.com

watchguard epdr

local privilege escalation

windows

named pipe

AI Score

6.8

Confidence

High

SSVC

Exploitation

none

Automatable

yes

Technical Impact

total

JSON

An issue was discovered in WatchGuard EPDR 8.0.21.0002. Due to a weak implementation of message handling between WatchGuard EPDR processes, it is possible to perform a Local Privilege Escalation on Windows by sending a crafted message to a named pipe.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:o:watchguard:epdr_firmware:*:*:*:*:*:*:*:*"
    ],
    "vendor": "watchguard",
    "product": "epdr_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "8.0.21.0002"
      }
    ],
    "defaultStatus": "unknown"
  }
]