First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2023-26237

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

An issue was discovered in WatchGuard EPDR 8.0.21.0002. It is possible to bypass the defensive capabilities by adding a registry key as SYSTEM.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
n/a	n/a	n/a
watchguard	epp_firmware	< 8.00.22.0010
watchguard	edr_firmware	< 8.00.22.0010
watchguard	epdr_firmware	< 8.00.22.0010
watchguard	panda_ad360_firmware	< 8.00.22.0010

References

Timeline

Published: Oct 5, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-262385.5An issue was discovered in WatchGuard EPDR 8.0.21.0002. It is possible to enable or disable defensive capabilities by sending a crafted mess CVE-2023-262395.5An issue was discovered in WatchGuard EPDR 8.0.21.0002. Due to a weak implementation of a password check, it is possible to obtain credentia CVE-2023-26246.1The KiviCare WordPress plugin before 3.2.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Refl CVE-2023-262427.8afu_mmio_region_get_by_offset in drivers/fpga/dfl-afu-region.c in the Linux kernel through 6.1.12 has an integer overflow.CVE-2023-262437.8An issue was discovered in the Hyundai Gen5W_L in-vehicle infotainment system AE_E_PE_EUR.S5W_L001.001.211214. The decryption binary used to CVE-2023-262447.8An issue was discovered in the Hyundai Gen5W_L in-vehicle infotainment system AE_E_PE_EUR.S5W_L001.001.211214. The AppDMClient binary file, CVE-2023-262457.8An issue was discovered in the Hyundai Gen5W_L in-vehicle infotainment system AE_E_PE_EUR.S5W_L001.001.211214. The AppUpgrade binary file, w CVE-2023-262467.8An issue was discovered in the Hyundai Gen5W_L in-vehicle infotainment system AE_E_PE_EUR.S5W_L001.001.211214. The AppUpgrade binary file, w CVE-2023-262485.3The Kademlia DHT (go-libp2p-kad-dht 0.20.0 and earlier) used in IPFS (0.18.1 and earlier) assigns routing information for content (i.e., inf CVE-2023-262497.5Knot Resolver before 5.6.0 enables attackers to consume its resources, launching amplification attacks and potentially causing a denial of s CVE-2023-26258.0A vulnerability exists that can be exploited by an authenticated client that is connected to the same network segment as the CoreTec 4, havi CVE-2023-262537.5In Gluster GlusterFS 11.0, there is an xlators/mount/fuse/src/fuse-bridge.c notify stack-based buffer over-read.

CVE-2023-26237: Medium severity, CVSS 6.7 | Vulnix