CVE-2024-3400: Palo Alto Networks PAN-OS: aktif olarak istismar edilen açık

Açıklama (NVD)

Palo Alto Networks PAN-OS GlobalProtect feature contains a command injection vulnerability that allows an unauthenticated attacker to execute commands with root privileges on the firewall.

Özet bilgiler

EPSS

%100,00 (yüzdelik 100)

Yama

Yok / bilinmiyor

KEV

Eklenme: 2024-04-12 · Son tarih: 2024-04-19 · fidye yazılımı kampanyalarında kullanıldı

Gerekli aksiyon: Apply mitigations per vendor instructions as they become available. Otherwise, users with vulnerable versions of affected devices should enable Threat Prevention IDs available from the vendor. See the vendor bulletin for more details and a patch release schedule.

Kaynaklar

• NVD kaydı
• CISA KEV kataloğu