Code injection

2023-09-1317:15:00

PRIOn knowledge base

www.prio-n.com

code injection

vulnerability

palo alto networks

cortex xdr

windows

5.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local user to disable the agent.

CPENameOperatorVersion
cortex_xdr_agentge5.0
cortex_xdr_agentle5.0.12.22203
cortex_xdr_agentge7.9.0
cortex_xdr_agentlt7.9.3
cortex_xdr_agentge7.9.0
cortex_xdr_agentlt7.9.101
cortex_xdr_agentge8.0.0
cortex_xdr_agentlt8.0.2
cortex_xdr_agenteq7.5.102

Name	Operator	Version
cortex_xdr_agent	ge	5.0
cortex_xdr_agent	le	5.0.12.22203
cortex_xdr_agent	ge	7.9.0
cortex_xdr_agent	lt	7.9.3
cortex_xdr_agent	ge	7.9.0
cortex_xdr_agent	lt	7.9.101
cortex_xdr_agent	ge	8.0.0
cortex_xdr_agent	lt	8.0.2
cortex_xdr_agent	eq	7.5.102

References

security.paloaltonetworks.com/CVE-2023-3280