CVE-2023-26237 - OpenCVE

An issue was discovered in WatchGuard EPDR 8.0.21.0002. It is possible to bypass the defensive capabilities by adding a registry key as SYSTEM.

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

Vendors & Products
CPE Configurations

Vendors	Products
Watchguard	Panda Ad360 Epdr Panda Ad360 Firmware Epp Epp Firmware Edr Firmware Edr Epdr Firmware

Configuration 1 [-]

AND

cpe:2.3:o:watchguard:epp_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:epp:-:*:*:*:*:*:*:*

Configuration 2 [-]

AND

cpe:2.3:o:watchguard:edr_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:edr:-:*:*:*:*:*:*:*

Configuration 3 [-]

AND

cpe:2.3:o:watchguard:epdr_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:epdr:-:*:*:*:*:*:*:*

Configuration 4 [-]

AND

cpe:2.3:o:watchguard:panda_ad360_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:panda_ad360:-:*:*:*:*:*:*:*

References

Link	Resource
https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2023-00005	Vendor Advisory

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: mitre

Published: 2023-10-05T00:00:00

Updated: 2023-10-05T00:26:50.620168

Reserved: 2023-02-20T00:00:00

Link: CVE-2023-26237

JSON object: View

NVD Information

Status : Analyzed

Published: 2023-10-05T01:15:10.187

Modified: 2023-10-11T14:00:07.037

Link: CVE-2023-26237

JSON object: View

Redhat Information

No data.

CWE

CWE-639

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:watchguard:epp_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "2361AC95-E9B5-4494-B4D3-A516E92E0180", "versionEndExcluding": "8.00.22.0010", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:watchguard:epp:-:*:*:*:*:*:*:*", "matchCriteriaId": "FCB7410D-4F42-49A1-B65F-2F57FBED5591", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:watchguard:edr_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D0BB0A60-F997-44F6-9B83-D89525D5E90B", "versionEndExcluding": "8.00.22.0010", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:watchguard:edr:-:*:*:*:*:*:*:*", "matchCriteriaId": "9BE98983-49EA-4B3D-B561-509DF3244630", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:watchguard:epdr_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "0E547FF3-E496-4AF4-8BA4-67D92E104335", "versionEndExcluding": "8.00.22.0010", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:watchguard:epdr:-:*:*:*:*:*:*:*", "matchCriteriaId": "CC28BE1A-C558-4132-8376-A1177030CB90", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:watchguard:panda_ad360_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "6FE92F05-0078-4B53-A282-5C7B9D70F17B", "versionEndExcluding": "8.00.22.0010", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:watchguard:panda_ad360:-:*:*:*:*:*:*:*", "matchCriteriaId": "8521691C-F38A-4E4C-ADE7-717218F2E951", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "An issue was discovered in WatchGuard EPDR 8.0.21.0002. It is possible to bypass the defensive capabilities by adding a registry key as SYSTEM."}, {"lang": "es", "value": "Se descubri\u00f3 un problema en WatchGuard EPDR 8.0.21.0002. Es posible evitar las capacidades defensivas agregando una clave de registro como SYSTEMA."}], "id": "CVE-2023-26237", "lastModified": "2023-10-11T14:00:07.037", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 0.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2023-10-05T01:15:10.187", "references": [{"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2023-00005"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-639"}], "source": "nvd@nist.gov", "type": "Primary"}]}