CVE-2024-7245

Summary

CVE-2024-7245 is a local privilege escalation vulnerability affecting Panda Security Dome VPN. The issue arises due to improper permissions assigned to a folder in the Hydra Sdk Windows Service. For an attacker to exploit this vulnerability, they must initially gain the ability to execute low-privileged code on the target system. Successful exploitation allows the attacker to escalate privileges and execute arbitrary code with SYSTEM permissions. This vulnerability, previously identified as ZDI-CAN-23429, poses a significant risk to affected installations of Panda Security Dome.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.