CVE-2023-26237

2023-10-0500:00:00

mitre

github.com

watchguard epdr

registry key

bypass defensive capabilities

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

An issue was discovered in WatchGuard EPDR 8.0.21.0002. It is possible to bypass the defensive capabilities by adding a registry key as SYSTEM.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:o:watchguard:epp_firmware:*:*:*:*:*:*:*:*"
    ],
    "vendor": "watchguard",
    "product": "epp_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "8.00.22.0010",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:watchguard:edr_firmware:*:*:*:*:*:*:*:*"
    ],
    "vendor": "watchguard",
    "product": "edr_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "8.00.22.0010",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:watchguard:epdr_firmware:*:*:*:*:*:*:*:*"
    ],
    "vendor": "watchguard",
    "product": "epdr_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "8.00.22.0010",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:watchguard:panda_ad360_firmware:*:*:*:*:*:*:*:*"
    ],
    "vendor": "watchguard",
    "product": "panda_ad360_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "8.00.22.0010",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]