Lucene search

Palo_altoCVE-2024-5914

HistoryAug 14, 2024 - 5:15 p.m.

CVE-2024-5914

2024-08-1417:15:18

CWE-77

palo_alto

web.nvd.nist.gov

command injection

palo alto networks

cortex xsoar

commonscripts pack

unauthenticated attacker

arbitrary commands

integration container

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS4

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/SC:H/VI:L/SI:H/VA:L/SA:N/AU:N/U:Amber/R:U/V:D/RE:M

AI Score

Confidence

High

EPSS

0.001

Percentile

39.1%

JSON

A command injection issue in Palo Alto Networks Cortex XSOAR CommonScripts Pack allows an unauthenticated attacker to execute arbitrary commands within the context of an integration container.

Affected configurations

Nvd

Vulners

Node

paloaltonetworkscortex_xsoar_commonscriptsRange<1.12.33

VendorProductVersionCPE
paloaltonetworkscortex_xsoar_commonscripts*cpe:2.3:a:paloaltonetworks:cortex_xsoar_commonscripts:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
paloaltonetworks	cortex_xsoar_commonscripts	*	cpe:2.3:a:paloaltonetworks:cortex_xsoar_commonscripts::::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Cortex XSOAR CommonScripts",
    "vendor": "Palo Alto Networks",
    "versions": [
      {
        "changes": [
          {
            "at": "1.12.33",
            "status": "unaffected"
          }
        ],
        "lessThan": "1.12.33",
        "status": "affected",
        "version": "1.12",
        "versionType": "custom"
      }
    ]
  }
]

References

security.paloaltonetworks.com/CVE-2024-5914

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS4

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/SC:H/VI:L/SI:H/VA:L/SA:N/AU:N/U:Amber/R:U/V:D/RE:M

AI Score

Confidence

High

EPSS

0.001

Percentile

39.1%

JSON

Related for CVE-2024-5914