Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2023-26239

Quick assessment

Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

WatchGuard EPDR是美国WatchGuard公司的一个应用程序。可预防、检测和响应任何类型的已知和未知恶意软件以及无文件和无恶意软件攻击。 WatchGuard EPDR 8.0.21.0002版本存在安全漏洞，该漏洞源于密码检查的实施较弱，攻击者利用该漏洞可能获得身份访问管理控制台的凭据。

AI Predicted 7.5 Difficulty: Easy EPSS 0.15% · P5

Possible ATT&CK Techniques 1 AI

T1552.004 · Private Keys
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2023-26239

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
An issue was discovered in WatchGuard EPDR 8.0.21.0002. Due to a weak implementation of a password check, it is possible to obtain credentials to access the management console as a non-privileged user.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
WatchGuard EPDR 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
WatchGuard EPDR是美国WatchGuard公司的一个应用程序。可预防、检测和响应任何类型的已知和未知恶意软件以及无文件和无恶意软件攻击。 WatchGuard EPDR 8.0.21.0002版本存在安全漏洞，该漏洞源于密码检查的实施较弱，攻击者利用该漏洞可能获得身份访问管理控制台的凭据。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2023-26239

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2023-26239

请登录查看更多情报信息。

Other References for CVE-2023-26239 (1)

Same Patch Batch · n/a · 2023-10-05 · 28 CVEs total

CVE-2022-3248 4.4 MEDIUM Openshift api admission checks does not enforce "custom-host" permissions
CVE-2022-4145 4.3 MEDIUM Content spoofing
CVE-2015-10125 4.3 MEDIUM WP Ultimate CSV Importer Plugin cross-site request forgery
CVE-2023-43269 pigcms 代码问题漏洞
CVE-2023-43343 OpenSolution Quick CMS 跨站脚本漏洞
CVE-2023-40920 PrestaShop SQL注入漏洞
CVE-2023-43284 D-Link DIR-846 安全漏洞
CVE-2023-43981 PrestaShop 代码问题漏洞
CVE-2023-43983 PrestaShop SQL注入漏洞
CVE-2023-44024 PrestaShop SQL注入漏洞
CVE-2023-43260 Milesight 跨站脚本漏洞
CVE-2023-44828 D-Link DIR-823G 安全漏洞
CVE-2023-44829 D-Link DIR-823G 安全漏洞
CVE-2023-44830 D-Link DIR-823G 安全漏洞
CVE-2023-44831 D-Link DIR-823G 安全漏洞
CVE-2023-44832 D-Link DIR-823G 安全漏洞
CVE-2023-44833 D-Link DIR-823G 安全漏洞
CVE-2023-44834 D-Link DIR-823G 安全漏洞
CVE-2023-44835 D-Link DIR-823G 安全漏洞
CVE-2023-44836 D-Link DIR-823G 安全漏洞

Showing top 20 of 28 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2023-26239

No comments yet

Leave a comment