WatchGuard Epp Firmware vulnerabilities

4 CVEs affecting WatchGuard Epp Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-26239, published 2023-10-05.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-26237, published 2023-10-05. Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days. An issue was discovered in WatchGuard EPDR 8.0.21.0002. It is possible to bypass the defensive capabilities by adding a registry key as SYSTEM.
CVE-2023-26238, published 2023-10-05. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. An issue was discovered in WatchGuard EPDR 8.0.21.0002. It is possible to enable or disable defensive capabilities by sending a crafted message to a named pipe.
CVE-2023-26239, published 2023-10-05. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. An issue was discovered in WatchGuard EPDR 8.0.21.0002. Due to a weak implementation of a password check, it is possible to obtain credentials to access the management console as a non-privileged…
CVE-2023-26236, published 2023-10-05. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. An issue was discovered in WatchGuard EPDR 8.0.21.0002. Due to a weak implementation of message handling between WatchGuard EPDR processes, it is possible to perform a Local Privilege Escalation on…