Panda Security Dome Local Privilege Escalation via PSANHost (CVE-2024-7243)

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability Name: (0Day) Panda Security Dome Link Following Local Privilege Escalation Vulnerability 2. Vulnerability ID: ZDI-24-1013, ZDI-CAN-23413 3. CVE ID: CVE-2024-7243 4. CVSS Score: 7.8, AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 5. Affected Vendor: Panda Security 6. Affected Product: Dome 7. Vulnerability Details: - Allows a local attacker to escalate privileges on an affected Panda Security Dome installation. - The attacker must first gain the ability to execute low-privilege code on the target system. - A specific flaw exists in the PSANHost executable. By creating a symbolic link, an attacker can abuse the service to create arbitrary files. - Attackers can exploit this vulnerability to escalate privileges and execute arbitrary code in the SYSTEM context. 8. Additional Details: - 2024-02-14: ZDI reported the vulnerability to WatchGuard PSIRT. - 2024-06-26: ZDI requested an update. - 2024-07-26: ZDI notified the vendor that, due to no response, a 0-day advisory would be published on 2024-07-29. 9. Mitigation: Due to the nature of the vulnerability, the only mitigation strategy is to restrict interaction with the application. 10. Disclosure Timeline: - 2024-02-14: Vulnerability reported to vendor. - 2024-07-29: Coordinated public advisory released. - 2024-08-15: Advisory updated. 11. Credit: Nicholas Zubrisky (@NZubrisky) and Michael DePlante (@izobashi) are credited for the Zero Day Initiative program at Trend Micro.

Goal Reached Thanks to every supporter — we hit 100%!

Panda Security Dome Local Privilege Escalation via PSANHost (CVE-2024-7243)