This vulnerability (CVE-2024-8424) involves improper privilege management (CWE-269) in the PSANHost.exe module of WatchGuard Endpoint Security products on Windows platforms. It enables a user with low privileges to delete arbitrary files with SYSTEM permissions, potentially impacting system integrity. The CVSS 4.0 score is 8.5, reflecting high impact and exploitability under local attack vector conditions. The affected version explicitly identified is 8.00.00.0000. There is no vendor advisory or patch currently available, and no known exploits in the wild have been reported.

An attacker with limited privileges on a vulnerable system can delete arbitrary files with SYSTEM-level permissions. This could lead to denial of service or disruption of security controls by removing critical files. The vulnerability does not require user interaction and has a local attack vector, making it a significant risk on compromised or multi-user systems.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict local access to trusted users only and monitor for suspicious file deletion activities related to the PSANHost.exe process.