Skip to content

CVE · Exploited · On CISA KEV

CVE-2024-3400

Palo Alto Networks PAN-OS Command Injection Vulnerability

10.0
CVSS 3.1
1
story
APR 12
added to KEV
Severity
10.0 Critical · NVD score
Vendor
Palo Alto Networks
Product
PAN-OS
Published
Apr 12, 2024
Added to KEV
Apr 12, 2024
KEV deadline
Apr 19, 2024
Ransomware use
Known
Weakness
CWE-20, CWE-77
Part of Salt Typhoon Telecom Hacks →

What it is

Palo Alto Networks PAN-OS GlobalProtect feature contains a command injection vulnerability that allows an unauthenticated attacker to execute commands with root privileges on the firewall.

From CISA's Known Exploited Vulnerabilities catalog

Decipher coverage · 1 story

Newest first ↑
  1. IntrusionsUS Gov Links Private Chinese Firms to Salt Typhoon HacksSalt Typhoon has not been observed exploiting zero-day flaws, but instead targeting known bugs in exposed network edge devices – some of which are years old.LINDSEY O'DONNELL-WELCH · 3 MIN

Official references

7 sources

Registries

RegistryNVDScore, weakness and every referenceRegistryCVE.orgThe official CVE recordRegistryCISA KEVKnown exploited, with the federal deadline

Advisories, fixes & analysis

Vendor advisorysecurity.paloaltonetworks.com/CVE-2024-3400Exploitunit42.paloaltonetworks.com/cve-2024-3400Vendor advisorypaloaltonetworks.com/blog/2024/04/more-on-the-pan-os-cveVendor advisorysecurity.paloaltonetworks.com/CVE-2024-3400