Lucene search

PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect

🗓️ 12 Apr 2024 06:00:55Reported by Palo Alto Networks Product Security Incident Response TeamType

paloalto🔗 securityadvisories.paloaltonetworks.com👁 152 Views

PAN-OS command injection vulnerability in GlobalProtec

Reporter	Title	Published	Views	Family All 71
The Hacker News	Palo Alto Networks Releases Urgent Fixes for Exploited PAN-OS Vulnerability	15 Apr 202408:17	–	thn
The Hacker News	Focus on What Matters Most: Exposure Management and Your Attack Surface	23 Aug 202410:55	–	thn
The Hacker News	Palo Alto Networks Discloses More Details on Critical PAN-OS Flaw Under Attack	20 Apr 202405:53	–	thn
The Hacker News	Zero-Day Alert: Critical Palo Alto Networks PAN-OS Flaw Under Active Attack	12 Apr 202408:56	–	thn
The Hacker News	TAG-100: New Threat Actor Uses Open-Source Tools for Widespread Attacks	18 Jul 202409:10	–	thn
The Hacker News	Palo Alto Networks Outlines Remediation for Critical PAN-OS Flaw Under Attack	26 Apr 202410:18	–	thn
The Hacker News	Hackers Deploy Python Backdoor in Palo Alto Zero-Day Attack	13 Apr 202408:25	–	thn
The Hacker News	U.S. Agencies Warn of Iranian Hacking Group's Ongoing Ransomware Attacks	29 Aug 202411:42	–	thn
The Hacker News	RedTail Crypto-Mining Malware Exploiting Palo Alto Networks Firewall Vulnerability	30 May 202414:24	–	thn
HackRead	Palo Alto Patches 0-Day (CVE-2024-3400) Exploited by Python Backdoor	15 Apr 202418:29	–	hackread

Vulners

Node

paloaltonetworks pan-osRange<10.2.7-h8

paloaltonetworks pan-osRange<11.1.2-h3

Source	Link
security	www.security.paloaltonetworks.com/CVE-2024-3400
unit42	www.unit42.paloaltonetworks.com/cve-2024-3400/
volexity	www.volexity.com/blog/2024/04/12/zero-day-exploitation-of-unauthenticated-remote-code-execution-vulnerability-in-globalprotect-cve-2024-3400/
paloaltonetworks	www.paloaltonetworks.com/blog/2024/04/more-on-the-pan-os-cve/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

12 Apr 2024 06:55Current

9.9High risk

Vulners AI Score9.9

CVSS310.0

EPSS0.965