Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cvePalo_altoCVE-2024-5912
HistoryJul 10, 2024 - 7:15 p.m.

CVE-2024-5912

2024-07-1019:15:11
CWE-347
palo_alto
web.nvd.nist.gov
43
palo alto networks
cortex xdr
file signature check
executable blocking
untrusted executables

CVSS4

6.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/SC:N/VI:H/SI:N/VA:N/SA:N/AU:N/U:Amber/R:U/V:C/RE:M

AI Score

6.8

Confidence

Low

EPSS

0

Percentile

9.3%

JSON

An improper file signature check in Palo Alto Networks Cortex XDR agent may allow an attacker to bypass the Cortex XDR agent’s executable blocking capabilities and run untrusted executables on the device. This issue can be leveraged to execute untrusted software without being detected or blocked.

Affected configurations

Vulners
Node
paloaltonetworkscortex_xdr_agentRange7.9–7.9.102
Node
paloaltonetworkscortex_xdr_agentRange8.2–8.2.2
VendorProductVersionCPE
paloaltonetworkscortex_xdr_agent*cpe:2.3:a:paloaltonetworks:cortex_xdr_agent:*:*:*:*:*:*:*:*

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Cortex XDR Agent",
    "vendor": "Palo Alto Networks",
    "versions": [
      {
        "status": "unaffected",
        "version": "8.4",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "8.3-CE",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "8.3",
        "versionType": "custom"
      },
      {
        "changes": [
          {
            "at": "7.9.102-CE",
            "status": "unaffected"
          }
        ],
        "lessThan": "7.9.102-CE",
        "status": "affected",
        "version": "7.9-CE",
        "versionType": "custom"
      },
      {
        "changes": [
          {
            "at": "8.2.2",
            "status": "unaffected"
          }
        ],
        "lessThan": "8.2.2",
        "status": "affected",
        "version": "8.2",
        "versionType": "custom"
      }
    ]
  }
]

Related

paloalto 1
vulnrichment 1
nvd 1
cvelist 1
paloalto
paloalto
Cortex XDR Agent: Improper File Signature Verification Checks
2024-07-10 16:00:00
vulnrichment
vulnrichment
CVE-2024-5912 Cortex XDR Agent: Improper File Signature Verification Checks
2024-07-10 18:40:16
nvd
nvd
CVE-2024-5912
2024-07-10 19:15:11
cvelist
cvelist
CVE-2024-5912 Cortex XDR Agent: Improper File Signature Verification Checks
2024-07-10 18:40:16

CVSS4

6.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/SC:N/VI:H/SI:N/VA:N/SA:N/AU:N/U:Amber/R:U/V:C/RE:M

AI Score

6.8

Confidence

Low

EPSS

0

Percentile

9.3%

JSON
Related for CVE-2024-5912
paloalto1vulnrichment1nvd1cvelist1