important · Privilege — Windows
A local Windows user can make WatchGuard's endpoint driver disclose arbitrary kernel and process memory.
Affects
WatchGuard Endpoint Security protection software and its PSKMAD kernel driver on Windows workstations and servers.
Missing authentication in PSKMAD.sys lets a non-administrator bypass the driver's handshake and issue privileged memory-read commands.
Detail and 3 sources
WatchGuard identifies a fixed Windows protection build.