5.5

CVE-2023-26239

An issue was discovered in WatchGuard EPDR 8.0.21.0002. Due to a weak implementation of a password check, it is possible to obtain credentials to access the management console as a non-privileged user.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Watchguard ≫ Epp Firmware Version < 8.00.22.0010
   Watchguard ≫ Epp Version-
Watchguard ≫ Edr Firmware Version < 8.00.22.0010
   Watchguard ≫ Edr Version-
Watchguard ≫ Epdr Firmware Version < 8.00.22.0010
   Watchguard ≫ Epdr Version-
Watchguard ≫ Panda Ad360 Firmware Version < 8.00.22.0010
   Watchguard ≫ Panda Ad360 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.06% 0.184
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CWE-273 Improper Check for Dropped Privileges

The product attempts to drop privileges but does not check or incorrectly checks to see if the drop succeeded.