CVE-2024-7243: falha de alta gravidade em Panda Security Dome
Panda Security Dome Link Following Local Privilege Escalation Vulnerability
Publicada em · Atualizada em
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.8epss 0.3%
probabilidade de exploração
0.3%top 74% das CVEs
exploração observada
nãonenhuma fonte reporta
Panda Security Dome Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Panda Security Dome. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
The specific flaw exists within the PSANHost executable. By creating a junction, an attacker can abuse the service to create arbitrary files. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-23413.
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Panda Security · DomeCVEs relacionadas — Panda Security Dome
No mesmo produto, das mais perigosas para as menos.
CVE-2024-7242HIGHPanda Security Dome Link Following Local Privilege Escalation VulnerabilityEPSS 0.3%CVE-2024-7241HIGHPanda Security Dome Link Following Local Privilege Escalation VulnerabilityEPSS 0.3%CVE-2024-7244HIGHPanda Security Dome VPN DLL Hijacking Local Privilege Escalation VulnerabilityEPSS 0.3%CVE-2024-13043HIGHPanda Security Dome Link Following Local Privilege Escalation VulnerabilityEPSS 0.3%CVE-2024-7245HIGHPanda Security Dome VPN Incorrect Permission Assignment Local Privilege Escalation VulnerabilityEPSS 0.2%