An issue was discovered in WatchGuard EPDR 8.0.21.0002. Due to a weak implementation of a password check, it is possible to obtain credentials to access the management console as a non-privileged user.
Search vulnerabilities
CVE-2023-26239
CVSS 3.1 · 5.5 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2023-26238
An issue was discovered in WatchGuard EPDR 8.0.21.0002. It is possible to enable or disable defensive capabilities by sending a crafted message to a named pipe.
CVSS 3.1 · 5.5 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2023-26237
An issue was discovered in WatchGuard EPDR 8.0.21.0002. It is possible to bypass the defensive capabilities by adding a registry key as SYSTEM.
CVSS 3.1 · 6.7 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2023-26236
An issue was discovered in WatchGuard EPDR 8.0.21.0002. Due to a weak implementation of message handling between WatchGuard EPDR processes, it is possible to perform a Local Privilege Escalation on Windows by sending a crafted message to a named pipe.
CVSS 3.1 · 7.8 High
EPSS < 1%
KEV · Not listed
Vendors
Products
Page 1 of 1.