Lucene search
HistoryFeb 14, 2024 - 6:15 p.m.
CVE-2024-0009
improper verification
stolen credentials
vpn connection
unauthorized ip address
palo alto networks
cve-2024-0009
CVSS3
6.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
EPSS
0
Percentile
9.0%
An improper verification vulnerability in the GlobalProtect gateway feature of Palo Alto Networks PAN-OS software enables a malicious user with stolen credentials to establish a VPN connection from an unauthorized IP address.
Related
paloalto
paloalto
PAN-OS: Improper IP Address Verification in GlobalProtect Gateway
2024-02-14 17:00:00
prion
prion
Input validation
2024-02-14 18:15:00
cve
cve
CVE-2024-0009
2024-02-14 18:15:47
nessus
nessus
Palo Alto Networks PAN-OS 10.2.x < 10.2.4 / 11.0.x < 11.0.1 Vulnerability
2024-02-15 00:00:00
vulnrichment
vulnrichment
cvelist
cvelist
CVSS3
6.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
EPSS
0
Percentile
9.0%
Related for NVD:CVE-2024-0009