CVE-2023-26238
Medium
Description
An issue was discovered in WatchGuard EPDR 8.0.21.0002. It is possible to enable or disable defensive capabilities by sending a crafted message to a named pipe.
SeverityMedium
CVSS5.5
Exploit probability—
ProductWatchguard Epdr Firmware
PublishedOct 5, 2023
First seenOct 5, 2023
How to fix
Update
- watchguard epdr_firmware8.00.22.0010 or later
- watchguard epp_firmware8.00.22.0010 or later
- watchguard edr_firmware8.00.22.0010 or later
- watchguard panda_ad360_firmware8.00.22.0010 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| watchguard epdr_firmware | v < 8.00.22.0010 | 8.00.22.0010 |
| watchguard epp_firmware | v < 8.00.22.0010 | 8.00.22.0010 |
| watchguard edr_firmware | v < 8.00.22.0010 | 8.00.22.0010 |
| watchguard panda_ad360_firmware | v < 8.00.22.0010 | 8.00.22.0010 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.