High · 8.5 CVE-2024-8424 EUVD-2024-49166GHSA-6jgr-2pw9-g4rc

WatchGuard Endpoint Protection Privilege Escalation in PSANHost Enables Arbitrary File Delete as SYSTEM

Published Nov 7, 2024 · Updated Aug 7, 2026 · Assigned by WatchGuard

Vendor: WatchGuard Product: Endpoint Security Product: Panda Dome

Description

Improper Privilege Management vulnerability in WatchGuard EPDR, Panda AD360 and Panda Dome on Windows (PSANHost.exe module) allows arbitrary file delete with SYSTEM permissions.

Affected products

Vendor	Product	Affected	Fixed
WatchGuard	Endpoint Security	8.00.00.0000 – < 8.00.23.0000	8.00.23.0000
WatchGuard	Panda Dome	22.00.00 – < 22.03.00	22.03.00

References

https://psirt.watchguard.com/CVE-2024-8424 vendor-advisory
https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2024-00017