CVE-2016-3943 Panda Endpoint Administration Agent before 7.50.00, as used in Panda Security for Business products for Windows, uses a weak ACL for the Panda Security/WaAgent directory and sub-directories, which all...
HighCVSS 7.8
EPSS 1.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Panda Endpoint Administration Agent before 7.50.00, as used in Panda Security for Business products for Windows, uses a weak ACL for the Panda Security/WaAgent directory and sub-directories, which allows local users to gain SYSTEM privileges by modifying an executable module.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| WatchGuard panda endpoint administration agent | <= 7.49 | No fix listed |
References
- packetstormsecurity.com third-party-advisory vdb-entry
- 20160406 Panda Security Multiple Business Products - Privilege Escalation mailing-list third-party-advisory
- 39671 exploit third-party-advisory vdb-entry