Description (CNA)
A command injection as a result of arbitrary file creation vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software for specific PAN-OS versions and distinct feature configurations may enable an unauthenticated attacker to execute arbitrary code with root privileges on the firewall. Cloud NGFW, Panorama appliances, and Prisma Access are not impacted by this vulnerability.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Palo Alto Networks / PAN-OS | unaffected 9.0.0; unaffected 9.1.0; unaffected 10.0.0; unaffected 10.1.0; affected 10.2.0 before 10.2.9-h1; affected 11.0.0 before 11.0.4-h1; affected 11.1.0 before 11.1.2-h3 |
| Palo Alto Networks / Cloud NGFW | unaffected All |
| Palo Alto Networks / Prisma Access | unaffected All |
CWE
CWE-77, CWE-20
References
- https://security.paloaltonetworks.com/CVE-2024-3400
- https://unit42.paloaltonetworks.com/cve-2024-3400/
- https://www.volexity.com/blog/2024/04/12/zero-day-exploitation-of-unauthenticated-remote-code-execution-vulnerability-in-globalprotect-cve-2024-3400/
- https://www.paloaltonetworks.com/blog/2024/04/more-on-the-pan-os-cve/
ADP enrichment
No English description supplied.
No English description supplied.
- https://security.paloaltonetworks.com/CVE-2024-3400
- https://unit42.paloaltonetworks.com/cve-2024-3400/
- https://www.volexity.com/blog/2024/04/12/zero-day-exploitation-of-unauthenticated-remote-code-execution-vulnerability-in-globalprotect-cve-2024-3400/
- https://www.paloaltonetworks.com/blog/2024/04/more-on-the-pan-os-cve/