CVE-2024-3400

🗓️ 12 Apr 2024 07:20:00Reported by palo_altoType

cve🔗 web.nvd.nist.gov📰️ 44 Media mentions👁 948 Views

Command injection in GlobalProtect feature of Palo Alto Networks PAN-O

Reporter	Title	Published	Views	Family All 97
GithubExploit	Exploit for Command Injection in Paloaltonetworks Pan-Os	30 Mar 202613:39	–	githubexploit
GithubExploit	Exploit for Improper Input Validation in Paloaltonetworks Pan-Os	18 Apr 202416:35	–	githubexploit
GithubExploit	Exploit for Improper Input Validation in Paloaltonetworks Pan-Os	16 Apr 202421:21	–	githubexploit
GithubExploit	Exploit for Improper Input Validation in Paloaltonetworks Pan-Os	21 Apr 202412:38	–	githubexploit
GithubExploit	Exploit for Command Injection in Paloaltonetworks Pan-Os	6 Apr 202619:36	–	githubexploit
GithubExploit	Exploit for Improper Input Validation in Paloaltonetworks Pan-Os	25 Apr 202410:23	–	githubexploit
GithubExploit	Exploit for Command Injection in Paloaltonetworks Pan-Os	20 Apr 202600:31	–	githubexploit
GithubExploit	Exploit for Improper Input Validation in Paloaltonetworks Pan-Os	17 Apr 202416:01	–	githubexploit
GithubExploit	Exploit for Improper Input Validation in Paloaltonetworks Pan-Os	16 Apr 202416:18	–	githubexploit
GithubExploit	Exploit for Improper Input Validation in Paloaltonetworks Pan-Os	12 May 202419:48	–	githubexploit

NVD

Vulners

Vulnrichment

Node

paloaltonetworks pan-osMatch10.2.0-

paloaltonetworks pan-osMatch10.2.0h1

paloaltonetworks pan-osMatch10.2.0h2

paloaltonetworks pan-osMatch10.2.1-

paloaltonetworks pan-osMatch10.2.1h1

paloaltonetworks pan-osMatch10.2.2-

paloaltonetworks pan-osMatch10.2.2h1

paloaltonetworks pan-osMatch10.2.2h2

paloaltonetworks pan-osMatch10.2.2h4

paloaltonetworks pan-osMatch10.2.3-

paloaltonetworks pan-osMatch10.2.3h11

paloaltonetworks pan-osMatch10.2.3h12

paloaltonetworks pan-osMatch10.2.3h2

paloaltonetworks pan-osMatch10.2.3h4

paloaltonetworks pan-osMatch10.2.3h9

paloaltonetworks pan-osMatch10.2.4-

paloaltonetworks pan-osMatch10.2.4h10

paloaltonetworks pan-osMatch10.2.4h2

paloaltonetworks pan-osMatch10.2.4h3

paloaltonetworks pan-osMatch10.2.4h4

paloaltonetworks pan-osMatch10.2.5-

paloaltonetworks pan-osMatch10.2.5h1

paloaltonetworks pan-osMatch10.2.5h4

paloaltonetworks pan-osMatch10.2.6-

paloaltonetworks pan-osMatch10.2.6h1

paloaltonetworks pan-osMatch10.2.7-

paloaltonetworks pan-osMatch10.2.7h1

paloaltonetworks pan-osMatch10.2.7h3

paloaltonetworks pan-osMatch10.2.7h6

paloaltonetworks pan-osMatch10.2.8-

paloaltonetworks pan-osMatch10.2.9-

paloaltonetworks pan-osMatch11.0.0-

paloaltonetworks pan-osMatch11.0.0h1

paloaltonetworks pan-osMatch11.0.0h2

paloaltonetworks pan-osMatch11.0.1-

paloaltonetworks pan-osMatch11.0.1h2

paloaltonetworks pan-osMatch11.0.1h3

paloaltonetworks pan-osMatch11.0.2-

paloaltonetworks pan-osMatch11.0.2h1

paloaltonetworks pan-osMatch11.0.2h2

paloaltonetworks pan-osMatch11.0.2h3

paloaltonetworks pan-osMatch11.0.3-

paloaltonetworks pan-osMatch11.0.3h1

paloaltonetworks pan-osMatch11.0.3h3

paloaltonetworks pan-osMatch11.0.3h5

paloaltonetworks pan-osMatch11.0.4-

paloaltonetworks pan-osMatch11.1.0-

paloaltonetworks pan-osMatch11.1.0h1

paloaltonetworks pan-osMatch11.1.0h2

paloaltonetworks pan-osMatch11.1.1-

paloaltonetworks pan-osMatch11.1.2-

paloaltonetworks pan-osMatch11.1.2h1

[
  {
    "defaultStatus": "unaffected",
    "product": "PAN-OS",
    "vendor": "Palo Alto Networks",
    "versions": [
      {
        "status": "unaffected",
        "version": "9.0.0"
      },
      {
        "status": "unaffected",
        "version": "9.1.0"
      },
      {
        "status": "unaffected",
        "version": "10.0.0"
      },
      {
        "status": "unaffected",
        "version": "10.1.0"
      },
      {
        "changes": [
          {
            "at": "10.2.9-h1",
            "status": "unaffected"
          }
        ],
        "lessThan": "10.2.9-h1",
        "status": "affected",
        "version": "10.2.0",
        "versionType": "custom"
      },
      {
        "changes": [
          {
            "at": "11.0.4-h1",
            "status": "unaffected"
          }
        ],
        "lessThan": "11.0.4-h1",
        "status": "affected",
        "version": "11.0.0",
        "versionType": "custom"
      },
      {
        "changes": [
          {
            "at": "11.1.2-h3",
            "status": "unaffected"
          }
        ],
        "lessThan": "11.1.2-h3",
        "status": "affected",
        "version": "11.1.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Cloud NGFW",
    "vendor": "Palo Alto Networks",
    "versions": [
      {
        "status": "unaffected",
        "version": "All"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Prisma Access",
    "vendor": "Palo Alto Networks",
    "versions": [
      {
        "status": "unaffected",
        "version": "All"
      }
    ]
  }
]

Source	Link
security	www.security.paloaltonetworks.com/CVE-2024-3400
volexity	www.volexity.com/blog/2024/04/12/zero-day-exploitation-of-unauthenticated-remote-code-execution-vulnerability-in-globalprotect-cve-2024-3400/
unit42	www.unit42.paloaltonetworks.com/cve-2024-3400/
paloaltonetworks	www.paloaltonetworks.com/blog/2024/04/more-on-the-pan-os-cve/
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog