Critical Vulnerabilities Discovered in WatchGuard and Panda Security Products; Patched Versions Released

In a concerning development, security researchers have recently uncovered critical vulnerabilities in WatchGuard and Panda Security products. These vulnerabilities could potentially allow attackers to cause denial of service (DoS) conditions or execute arbitrary code with system privileges. The vulnerabilities specifically affect the Panda Kernel Memory Access driver (pskmad_64.sys), which is installed alongside WatchGuard EPDR, Panda AD360, and Panda Dome for Windows. In response to these findings, the companies have promptly released patched versions to address the vulnerabilities.

Vulnerabilities in WatchGuard and Panda Security Products

The vulnerable products include WatchGuard EDR, Panda AD360, and Panda Dome for Windows. These products are commonly used by organizations for endpoint protection and security management.

The vulnerabilities arise from issues within the Panda Kernel Memory Access driver (pskmad_64.sys), which is responsible for handling kernel-level memory operations. This driver, when compromised, could lead to serious security breaches and compromise the overall system integrity.

Vulnerability 1: CVE-2023-6330 – Memory Pool Overflow Defect

The first vulnerability, identified as CVE-2023-6330, is characterized as a memory pool overflow defect. If exploited, it allows an attacker to overflow the allocated kernel memory pool.

The driver fails to adequately validate the contents of specific registry values related to the operating system (OS) version. This oversight enables an attacker to inject maliciously crafted content into the registry, ultimately leading to the overflow of kernel memory.

Exploiting this vulnerability could result in the execution of arbitrary code with system privileges. However, it is important to note that successful exploitation of this vulnerability requires authentication with administrative privileges.

Vulnerability 2: CVE-2023-6331 – Out-of-Bounds Write Issue

The second vulnerability, identified as CVE-2023-6331, is an out-of-bounds write issue that also results in a kernel memory overflow.

An attacker can exploit this vulnerability by sending a specifically crafted packet via an I/O Request Packet (IRP) request with a particular IOCTL code. This action potentially leads to an overflow in the non-paged memory area, resulting in compromised system security.

Similar to the first vulnerability, successful exploitation of CVE-2023-6331 could result in arbitrary code execution with system privileges. However, authentication with administrative privileges is still necessary for the attacker to carry out the exploit.

Authentication Requirements for Exploiting the Vulnerabilities

To successfully exploit both vulnerabilities, an attacker must possess administrative privileges. This requirement acts as a protective measure, making it challenging for malicious actors to leverage the vulnerabilities without already having elevated access rights.

The need for administrative privileges adds an extra layer of protection, particularly in environments where proper access control and user privilege management are enforced. Organizations that strictly adhere to user privilege segregation can potentially mitigate the risks associated with these vulnerabilities.

Patching and Resolution of the Vulnerabilities

To mitigate the vulnerabilities, WatchGuard and Panda Security have promptly released patched versions. The updates are available as WatchGuard EPDR and Panda AD360 version 8.00.22.0023, designed to address the identified issues and enhance the overall security of these products.

Additionally, users of Panda Dome for Windows should ensure that they have updated to version 22.02.01. This release incorporates the necessary patches to safeguard against these vulnerabilities, further securing the users’ systems.

In addition to resolving the reported vulnerabilities, the released patches also address an arbitrary kernel memory read flaw in the pskmad_64.sys driver. If exploited, this flaw could allow an attacker to read arbitrary kernel memory, potentially revealing sensitive information.

Information on Accessing More Details and Patches

For more detailed information on the vulnerabilities and the patches provided, users are encouraged to visit WatchGuard’s security advisories page. Here, they can find specific instructions on applying the necessary updates and recommended security measures to ensure system protection.

The discovery of critical vulnerabilities within WatchGuard and Panda Security products highlights the ongoing challenges organizations face in maintaining robust security systems. Prompt action from both companies in releasing patched versions signifies their commitment to addressing these vulnerabilities and ensuring user safety. Organizations and individuals who utilize these products should immediately update to the latest patched versions to safeguard themselves from potential exploitation and maintain a secure operating environment.

Explore more

How Is AI Revolutionizing Email Marketing Strategies?

Setting the Stage for Digital Communication Evolution In today’s hyper-connected digital landscape, businesses send billions of emails daily, yet only a fraction capture attention amid overflowing inboxes, pushing marketers to seek innovative solutions. Artificial Intelligence (AI) has emerged as a game-changer in transforming email marketing from a generic broadcast tool into a precision-driven strategy. With the ability to analyze vast

How Is Embedded Finance Transforming UK Brand Experiences?

Imagine a world where purchasing a new gadget at a retail store instantly offers tailored financing options right at checkout, or where booking a vacation seamlessly includes travel insurance within the same app. This is the reality shaped by embedded finance, a transformative technology integrating financial services into non-financial platforms. As digital ecosystems continue to dominate consumer interactions in 2025,

Paid Content Marketing Triumphs in the AI Era over Earned Media

In the rapidly changing arena of digital marketing, a profound transformation is reshaping how brands connect with audiences, marking a significant shift in strategy. Once a dominant force, earned media—those organic news features or viral social media moments—has been dethroned as the go-to strategy for growth among businesses, musicians, and creators. Now, paid content marketing has surged to the forefront,

Job Openings Drop in July, Yet Hiring Remains Strong

Overview of the U.S. Labor Market In the heat of summer, as businesses and workers navigate an ever-shifting economic landscape, a striking statistic emerges from the U.S. labor market: job openings have dipped to 7.2 million in July, down from 7.4 million just a month prior, raising eyebrows especially when juxtaposed with the robust hiring figures of 5.3 million for

Trend Analysis: Cooling US Labor Market Dynamics

Introduction In a startling reflection of economic headwinds, US private sector job growth plummeted to a mere 54,000 in August, nearly half of the previous month’s tally of 106,000, signaling a profound slowdown in labor market momentum. This sharp decline arrives at a critical juncture, with economic uncertainty casting a long shadow, policy debates intensifying, and political figures like President