Lucene search

K
cvelistPalo_altoCVELIST:CVE-2023-3280
HistorySep 13, 2023 - 4:13 p.m.

CVE-2023-3280 Cortex XDR Agent: Local Windows User Can Disable the Agent

2023-09-1316:13:29
CWE-755
palo_alto
www.cve.org
5
palo alto networks
windows devices
protection mechanism

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

5.7

Confidence

High

EPSS

0

Percentile

5.1%

A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local user to disable the agent.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Windows"
    ],
    "product": "Cortex XDR Agent",
    "vendor": "Palo Alto Networks",
    "versions": [
      {
        "status": "affected",
        "version": "5.0"
      },
      {
        "status": "affected",
        "version": "7.5-CE"
      },
      {
        "changes": [
          {
            "at": "7.9.3",
            "status": "unaffected"
          }
        ],
        "lessThan": "7.9.3",
        "status": "affected",
        "version": "7.9",
        "versionType": "custom"
      },
      {
        "changes": [
          {
            "at": "7.9.101-CE",
            "status": "unaffected"
          }
        ],
        "lessThan": "7.9.101-CE",
        "status": "affected",
        "version": "7.9-CE",
        "versionType": "custom"
      },
      {
        "changes": [
          {
            "at": "8.0.2",
            "status": "unaffected"
          }
        ],
        "lessThan": "8.0.2",
        "status": "affected",
        "version": "8.0",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "8.1"
      }
    ]
  }
]

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

5.7

Confidence

High

EPSS

0

Percentile

5.1%

Related for CVELIST:CVE-2023-3280