Vulnerabilities

TI-2019-09009 CVE-2019-12042 · GHSA-qjwh-v6w7-c84w

Insecure permissions of the section object Global\PandaDevicesAgentSharedMemory and the…

MEDIUM 48

Insecure permissions of the section object Global\PandaDevicesAgentSharedMemory and the event Global\PandaDevicesAgentSharedMemoryChange in Panda products before 18.07.03 allow attackers to queue an event (as an encrypte…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03496 Published 2019-05-23 No fix listed CWE-732

TI-2018-04650 CVE-2018-6322 · GHSA-5xv7-qjhf-w2mq

Panda Global Protection 17.0.1 allows local users to gain privileges or cause a denial of…

LOW 34

Panda Global Protection 17.0.1 allows local users to gain privileges or cause a denial of service by impersonating all the pipes through a use of \.\pipe\PSANMSrvcPpal -- an "insecurely created named pipe." Ensures full…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00289 Published 2018-03-12 No fix listed

TI-2018-04649 CVE-2018-6321 · GHSA-j9rv-445p-87g9

Unquoted Windows search path vulnerability in the panda_url_filtering service in Panda…

LOW 34

Unquoted Windows search path vulnerability in the panda_url_filtering service in Panda Global Protection 17.0.1 allows local users to gain privileges via a malicious artefact.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.0033 Published 2018-03-12 No fix listed CWE-428

TI-2017-12944 CVE-2017-17684 · GHSA-8p6f-f28q-pjqg

Panda Global Protection 17.0.1 allows a system crash via a 0xb3702c04 \\.\PSMEMDriver DeviceIoControl request.

LOW 35

Panda Global Protection 17.0.1 allows a system crash via a 0xb3702c04 \\.\PSMEMDriver DeviceIoControl request.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.0112 Published 2017-12-14 No fix listed CWE-119

TI-2017-12943 CVE-2017-17683 · GHSA-pc9f-xcr8-7gwq

Panda Global Protection 17.0.1 allows a system crash via a 0xb3702c44 \\.\PSMEMDriver DeviceIoControl request.

LOW 35

Panda Global Protection 17.0.1 allows a system crash via a 0xb3702c44 \\.\PSMEMDriver DeviceIoControl request.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.0112 Published 2017-12-14 No fix listed CWE-119

TI-2009-03999 CVE-2009-4215 · GHSA-pwcw-cc5w-f5wp

Panda Global Protection 2010, Internet Security 2010, and Antivirus Pro 2010 use weak…

LOW 32

Panda Global Protection 2010, Internet Security 2010, and Antivirus Pro 2010 use weak permissions (Everyone: Full Control) for the product files, which allows local users to gain privileges by replacing executables with…

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.00368 Published 2009-12-07 No fix listed CWE-264

Vulnerabilities

Filters

Insecure permissions of the section object Global\PandaDevicesAgentSharedMemory and the…

Panda Global Protection 17.0.1 allows local users to gain privileges or cause a denial of…

Unquoted Windows search path vulnerability in the panda_url_filtering service in Panda…

Panda Global Protection 17.0.1 allows a system crash via a 0xb3702c04 \\.\PSMEMDriver DeviceIoControl request.

Panda Global Protection 17.0.1 allows a system crash via a 0xb3702c44 \\.\PSMEMDriver DeviceIoControl request.

Panda Global Protection 2010, Internet Security 2010, and Antivirus Pro 2010 use weak…