This vulnerability in the PSANHost.exe module of WatchGuard EPDR, Panda AD360, and Panda Dome on Windows arises from improper privilege management. It enables an attacker with local privileges to delete arbitrary files with SYSTEM permissions, potentially leading to significant system impact. The affected versions are EPDR and Panda AD360 prior to 8.00.23.0000, and Panda Dome prior to 22.03.00. The CVSS 3.1 vector indicates low attack complexity, low privileges required, no user interaction, and high impact on confidentiality, integrity, and availability.

An attacker with local privileges can delete arbitrary files with SYSTEM permissions, which can lead to denial of service or compromise of system integrity and confidentiality. The high CVSS score reflects the critical nature of the impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict local access to trusted users only and monitor for suspicious activity related to file deletions by the PSANHost.exe process.