CVE-2024-8424

WatchGuard Endpoint Protection Privilege Escalation in PSANHost Enables Arbitrary File Delete as SYSTEM

State: Published
Severity: 8.5 High
Published: Nov 7, 2024
Updated: Aug 7, 2026
Reserved: Sep 4, 2024

Description

Improper Privilege Management vulnerability in WatchGuard EPDR, Panda AD360 and Panda Dome on Windows (PSANHost.exe module) allows arbitrary file delete with SYSTEM permissions.

Scores

CVSS	Score	Vector	Source
4.0	8.5 High	CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N	WatchGuard

Weaknesses

CWE-269

Affected Products

Product	Versions
Endpoint SecurityWatchGuard	8.00.00.0000 to before 8.00.23.0000Affected
Panda DomeWatchGuard	22.00.00 to before 22.03.00Affected

References

https://psirt.watchguard.com/CVE-2024-8424vendor-advisory
https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2024-00017

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.