Lucene search

Palo_altoCVE-2024-8690

HistorySep 11, 2024 - 5:15 p.m.

CVE-2024-8690

2024-09-1117:15:14

CWE-440

palo_alto

web.nvd.nist.gov

palo alto networks

cortex xdr

windows privileges

malware

detection mechanism

CVSS4

5.6

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/SC:N/VI:H/SI:N/VA:N/SA:L/AU:N/U:Amber/R:U/V:D/RE:M

AI Score

7.1

Confidence

Low

EPSS

Percentile

9.6%

JSON

A problem with a detection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices enables a user with Windows administrator privileges to disable the agent. This issue may be leveraged by malware to disable the Cortex XDR agent and then to perform malicious activity.

Affected configurations

Vulners

Node

paloaltonetworkscortex_xdr_agentRange≤7.9.102

VendorProductVersionCPE
paloaltonetworkscortex_xdr_agent*cpe:2.3:a:paloaltonetworks:cortex_xdr_agent:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
paloaltonetworks	cortex_xdr_agent	*	cpe:2.3:a:paloaltonetworks:cortex_xdr_agent::::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Cortex XDR Agent",
    "vendor": "Palo Alto Networks",
    "versions": [
      {
        "status": "unaffected",
        "version": "8.5"
      },
      {
        "status": "unaffected",
        "version": "8.4"
      },
      {
        "status": "unaffected",
        "version": "8.3"
      },
      {
        "status": "unaffected",
        "version": "8.3-CE"
      },
      {
        "status": "unaffected",
        "version": "8.2"
      },
      {
        "status": "affected",
        "version": "7.9.102-CE"
      }
    ]
  }
]

References

security.paloaltonetworks.com/CVE-2024-8690

Social References