CVE-2023-3280

2023-09-1317:15:09

CWE-755

[email protected]

web.nvd.nist.gov

palo alto networks

cortex xdr

windows

local user

disablement

vulnerability

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

5.4

Confidence

High

EPSS

Percentile

5.1%

JSON

A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local user to disable the agent.

Affected configurations

Nvd

Node

paloaltonetworkscortex_xdr_agentRange5.0–5.0.12.22203

paloaltonetworkscortex_xdr_agentRange7.9.0–7.9.3-

paloaltonetworkscortex_xdr_agentRange7.9.0–7.9.101content_update

paloaltonetworkscortex_xdr_agentRange8.0.0–8.0.2

paloaltonetworkscortex_xdr_agentMatch7.5.102content_update

AND

microsoftwindowsMatch-

VendorProductVersionCPE
paloaltonetworkscortex_xdr_agent*cpe:2.3:a:paloaltonetworks:cortex_xdr_agent:*:*:*:*:*:*:*:*
paloaltonetworkscortex_xdr_agent*cpe:2.3:a:paloaltonetworks:cortex_xdr_agent:*:*:*:*:-:*:*:*
paloaltonetworkscortex_xdr_agent*cpe:2.3:a:paloaltonetworks:cortex_xdr_agent:*:*:*:*:content_update:*:*:*
paloaltonetworkscortex_xdr_agent7.5.102cpe:2.3:a:paloaltonetworks:cortex_xdr_agent:7.5.102:*:*:*:content_update:*:*:*
microsoftwindows-cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
paloaltonetworks	cortex_xdr_agent	*	cpe:2.3:a:paloaltonetworks:cortex_xdr_agent::::::::
paloaltonetworks	cortex_xdr_agent	*	cpe:2.3:a:paloaltonetworks:cortex_xdr_agent:::::-:::*
paloaltonetworks	cortex_xdr_agent	*	cpe:2.3:a:paloaltonetworks:cortex_xdr_agent:::::content_update:::*
paloaltonetworks	cortex_xdr_agent	7.5.102	cpe:2.3:a:paloaltonetworks:cortex_xdr_agent:7.5.102::::content_update:::
microsoft	windows	-	cpe:2.3:o:microsoft:windows:-:::::::*