CVE

CVE-2024-3400

P1⬤ KNOWN RANSOMWARE USE

Palo Alto Networks PAN-OS Command Injection Vulnerability

Palo Alto Networks · PAN-OS

Date added (CISA)

2024-04-12

Remediation due

2024-04-19

Known ransomware use

Yes

Remediation priority

P1 — known ransomware use · past CISA due date

Description

Palo Alto Networks PAN-OS GlobalProtect feature contains a command injection vulnerability that allows an unauthenticated attacker to execute commands with root privileges on the firewall.

Source: NVD ↗ · CISA KEV Catalog ↗