Back to Database
Status published
High
CVE-2024-8424
WatchGuard Endpoint Protection Privilege Escalation in PSANHost Enables Arbitrary File Delete as SYSTEM
Vulnerability Description
Improper Privilege Management vulnerability in WatchGuard EPDR, Panda AD360 and Panda Dome on Windows (PSANHost.exe module) allows arbitrary file delete with SYSTEM permissions. This issue affects EPDR: before 8.00.23.0000; Panda AD360: before 8.00.23.0000; Panda Dome: before 22.03.00.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-8424
Credits & Attribution
No credits recorded in the NVD database.
More from WatchGuard
View All →CVE-2025-9242
WatchGuard Firebox iked Out of Bounds Write Vulnerability
Critical
9.3
CVE-2025-6999
WatchGuard Firebox Authentication Portal Request Smuggling Vulnerability
Medium
6.9
CVE-2025-6947
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in SIP Proxy Configuration
Medium
4.8
CVE-2025-6946
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in IPS Configuration
Medium
4.8
CVE-2025-4805
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Acces Portal Configuration
Medium
4.8
Affected Vendor
WatchGuard
View all reports →Affected Software
EPDR, Panda AD360, Panda Dome
Vulnerable Versions:
0
Timeline
Official Publish:
November 7th, 2024
Last Modified:
November 8th, 2024
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H